Lucene search
K
Bdu FstecRecent

74701 matches found

BDU FSTEC
BDU FSTEC
added 2025/05/23 12:0 a.m.1 views

The vulnerability of the formIpv6Setup function in the Totolink A3002R router’s microprogramming software allows a attacker to compromise the confidentiality and integrity of the protected information.

The vulnerability of the formIpv6Setup function in the Totolink A3002R router’s microprogramming software is related to buffer overflow in the stack. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality and integrity of the protected information...

5.4CVSS5.8AI score0.00185EPSS
Exploits1References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/05/23 12:0 a.m.1 views

The vulnerability of the formMapDelDevice function in the Totolink A3002R router’s microprogramming software allows a intruder to compromise the confidentiality and integrity of the protected information.

The vulnerability of the formMapDelDevice function in the Totolink A3002R router’s microprogramming software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker operating remotely to compromise the confidentiality and...

5.4CVSS5.5AI score0.00185EPSS
Exploits1References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/05/23 12:0 a.m.2 views

The vulnerability of the /boafrm/formWsc file in the HTTP POST Request Handler of the microprogramming software for TOTOLINK routers, models A702R, A3002R, and A3002RU, allows a perpetrator to execute arbitrary code.

The vulnerability of the /boafrm/formWsc file in the HTTP POST Request Handler of the microprogramming software for TOTOLINK A702R, A3002R, and A3002RU routers is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows an attacker who...

9CVSS8.1AI score0.00982EPSS
Exploits0References6Affected Software3
BDU FSTEC
BDU FSTEC
added 2025/05/23 12:0 a.m.3 views

The vulnerability of the formDhcpv6s function in the Totolink A3002R router’s software allows a attacker to compromise the confidentiality and integrity of the protected information.

The vulnerability of the formDhcpv6s function in the Totolink A3002R router’s microprogramming system is related to buffer overflow in the stack. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality and integrity of the protected information...

6.5CVSS5.8AI score0.00244EPSS
Exploits1References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/05/23 12:0 a.m.4 views

The vulnerability of the CloudACMunualUpdate function in the microprogramming software for TOTOLINK CP450 allows a hacker to execute arbitrary commands.

The vulnerability of the CloudACMunualUpdate function in TOTOLINK CP450 router microprogramming software is related to the lack of measures for cleaning input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands through the FileName parameter...

7.5CVSS6AI score0.0278EPSS
Exploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/05/23 12:0 a.m.1 views

The vulnerability of the getSysStatusCfg function in TOTOLINK EX200 router microprogramming software allows a intruder to gain unauthorized access to protected information.

The vulnerability of the getSysStatusCfg function in TOTOLINK EX200 router microprogramming software relates to the disclosure of information. Exploiting this vulnerability may allow an attacker, operating remotely, to gain unauthorized access to protected information...

7.8CVSS5.5AI score0.08174EPSS
Exploits1References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/05/23 12:0 a.m.2 views

The vulnerability of the Configuration Handler component in D-Link DI-7003GV2 router microprogramming software allows a hacker to disclose confidential information.

The vulnerability of the Configuration Handler component in D-Link DI-7003GV2 router microprogramming software is related to the disclosure of information. Exploiting this vulnerability can allow an attacker to disclose confidential information remotely...

5.3CVSS5.8AI score0.00457EPSS
Exploits1References2
BDU FSTEC
BDU FSTEC
added 2025/05/23 12:0 a.m.2 views

The vulnerability of D-Link DI-7003GV2 router microprogramming software, related to the disclosure of information, allows a intruder to disclose confidential data.

The vulnerability of D-Link DI-7003GV2 router microprogramming software is related to the disclosure of information. Exploiting this vulnerability can allow an attacker, operating remotely, to disclose confidential information...

5.3CVSS5.8AI score0.00311EPSS
Exploits1References2
BDU FSTEC
BDU FSTEC
added 2025/05/23 12:0 a.m.1 views

The vulnerability of the /adv_dhcps.php file of the Static Pool Settings Page component in the wireless access points of the D-Link DAP-2695 microprogramming system allows a hacker to perform cross-site scripting attacks.

The vulnerability of the /advdhcps.php file of the Static Pool Settings Page component in the wireless access points of the D-Link DAP-2695 microprogramming system is related to the lack of security measures for the website structure. Exploiting this vulnerability allows a malicious actor to...

4CVSS5AI score0.00243EPSS
Exploits1References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/05/23 12:0 a.m.1 views

The vulnerability of D-Link DI-7003GV2 router microprogramming software, related to the disclosure of information, allows a intruder to disclose confidential data.

The vulnerability of D-Link DI-7003GV2 router microprogramming software is related to the disclosure of information. Exploiting this vulnerability can allow an attacker, operating remotely, to disclose confidential information...

5.3CVSS5.8AI score0.00337EPSS
Exploits1References2
BDU FSTEC
BDU FSTEC
added 2025/05/23 12:0 a.m.2 views

The vulnerability of the SubUPnPCSInit function in the /sbin/udev file of D-Link DCS-932L microprogrammed IP camera software allows a intruder to trigger a service failure.

The vulnerability of the SubUPnPCSInit function in the /sbin/udev file of D-Link DCS-932L microprogrammed IP camera software is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

9CVSS7.9AI score0.00501EPSS
Exploits1References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/05/23 12:0 a.m.2 views

The vulnerability of the application for publishing director entries in the share_directory domain of the REDEOS operating system allows a perpetrator to elevate their privileges and execute arbitrary commands.

The vulnerability of the application for publishing director entries in the sharedirectory domain of the REDEOS operating system is related to insecure management of privileges during the execution of the D-Bus service. Exploiting this vulnerability allows an attacker to increase their privileges...

7.8CVSS6AI score
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/05/23 12:0 a.m.2 views

The vulnerability of the “kiosk” mode in the redos-kiosk-utils package of the RED OS operating system allows a intruder to execute arbitrary commands.

The vulnerability of the “kiosk” mode in the redos-kiosk-utils package of the RED OS operating system is related to deficiencies in restricting the loading of files of a dangerous type. Exploiting this vulnerability allows an attacker to execute arbitrary commands...

6.3CVSS5.8AI score
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/05/23 12:0 a.m.2 views

The vulnerability of the fromSafeSetMacFilter (/goform/setMacFilterCfg) function in the Tenda AC7 router software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the fromSafeSetMacFilter function /goform/setMacFilterCfg in the Tenda AC7 router’s microprogramming software is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of t...

9CVSS8AI score0.01103EPSS
Exploits1References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/05/23 12:0 a.m.1 views

The vulnerability lies in the /goform/multimodalAdd component of the HTTP POST Request Handler in the microprogramming software for Tenda A15 routers. This allows a hacker to execute any arbitrary code.

The vulnerability in the /goform/multimodalAdd component of the HTTP POST Request Handler of the microprogramming-based router software Tenda A15 involves copying buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker operating remotely to execu...

9CVSS8AI score0.01028EPSS
Exploits0References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/05/23 12:0 a.m.1 views

Vulnerability of the cgidhcpsCfgSet() function (Program:/bin/httpd) in Tenda W12 and i24 router microsoftware, allowing a hacker to execute arbitrary code

The vulnerability of the cgidhcpsCfgSet function Program:/bin/httpd in the Tenda W12 and i24 router microprogramming systems is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to execute arbitrary code when processing parameters such as startIp, endI...

9CVSS8.4AI score0.00341EPSS
Exploits1References6
BDU FSTEC
BDU FSTEC
added 2025/05/23 12:0 a.m.1 views

The vulnerability of the wifiSSID parameter in the /goform/setModules function of the Tenda W18E v2.0 router’s microprogramming software, which allows a hacker to trigger a service failure.

The vulnerability of the wifiSSID parameter in the /goform/setModules function of the Tenda W18E v2.0 router’s microprogramming software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

6.8CVSS6AI score0.00344EPSS
Exploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/05/23 12:0 a.m.1 views

The vulnerability of the formArpNerworkSet function in the /goform/ArpNerworkSet file of the Tenda A15 wireless access point software allows a attacker to cause a service failure.

The vulnerability of the formArpNerworkSet function in the /goform/ArpNerworkSet microprogramming system for the wireless access point Tenda A15 is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

6.8CVSS6.5AI score0.00324EPSS
Exploits1References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/05/23 12:0 a.m.1 views

The vulnerability of the /goform/setPptpUserList component in the Tenda TX3 router software, which involves copying buffers without checking the size of the input data, allows an attacker to compromise the accessibility of protected information.

The vulnerability of the /goform/setPptpUserList component in the Tenda TX3 router microprogramming system is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to compromise the accessibility of protected informati...

6.8CVSS6.6AI score0.00348EPSS
Exploits1References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/05/23 12:0 a.m.2 views

The vulnerability of the /goform/SetStaticRouteCfg component in the Tenda TX3 router software, which involves copying buffers without checking the size of the input data, allows an attacker to compromise the accessibility of protected information.

The vulnerability of the /goform/SetStaticRouteCfg component in the Tenda TX3 router software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to compromise the accessibility of protected information...

6.8CVSS6.6AI score0.00069EPSS
Exploits1References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/05/23 12:0 a.m.2 views

The vulnerability of the check_dws_cookie function in the /storage directory of the Tenda DAP-1520 router microprogramming software allows a hacker to execute arbitrary code.

The vulnerability of the checkdwscookie function in the /storage directory of the Tenda DAP-1520 router microprogramming system is related to writing beyond buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code by using the host paramet...

10CVSS8.4AI score0.01491EPSS
Exploits1References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/05/23 12:0 a.m.3 views

The vulnerability of the sub_431CF0() function in the microprogrammed Wi-Fi router software Tenda AX12 allows a hacker to execute arbitrary code.

The vulnerability of the sub431CF0 function in Tenda AX12 Wi-Fi routers’ microprogramming software is related to buffer overflow in the stack. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

10CVSS6.4AI score0.00288EPSS
Exploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/05/23 12:0 a.m.2 views

The vulnerability of the SSH-server software solution for monitoring the status of B&R APROL industrial systems allows a intruder to execute arbitrary commands.

The vulnerability of the SSH-server software solution for monitoring the status of B&R APROL industrial systems is related to the inclusion of functions from an unreliable and uncontrolled area. Exploiting this vulnerability could allow a perpetrator to execute arbitrary commands...

7.8CVSS5.8AI score0.00099EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/05/23 12:0 a.m.2 views

The vulnerability of GRUB, a software solution for monitoring the status of industrial systems like B&R APROL, allows an intruder to influence the confidentiality, integrity, and accessibility of protected information.

The vulnerability of GRUB, a software solution for monitoring the status of B&R APROL industrial systems, lies in the absence of authentication for a critical function. Exploiting this vulnerability could allow an intruder to influence the confidentiality, integrity, and accessibility of protecte...

7.2CVSS5.5AI score0.00196EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/05/23 12:0 a.m.7 views

The vulnerability of SCALANCE W-700 IEEE 802.11ax industrial switches, related to insufficient verification of input data, allows a intruder to execute arbitrary commands.

The vulnerability of SCALANCE W-700 IEEE 802.11ax industrial switches lies in insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

9CVSS5.9AI score0.00236EPSS
Exploits0References2Affected Software17
BDU FSTEC
BDU FSTEC
added 2025/05/23 12:0 a.m.2 views

The vulnerability of the SNMPv3 implementation of SCALANCE W-700 IEEE 802.11ax industrial switches allows a intruder to alter the data representation type.

The vulnerability of the SNMPv3 implementation of SCALANCE W-700 IEEE 802.11ax switches is related to access control errors. Exploiting this vulnerability allows a remote attacker to alter the data representation type...

4.3CVSS5.5AI score0.00108EPSS
Exploits0References2Affected Software17
BDU FSTEC
BDU FSTEC
added 2025/05/23 12:0 a.m.3 views

The vulnerability of microprogramming software in devices for integration and control of automation and data collection systems, related to the use of cryptographic algorithms containing defects, allows attackers to compromise the confidentiality and integrity of protected information.

The vulnerability of microprogramming software in devices for integration and control of automation systems and data collection servers is related to the use of cryptographic algorithms that contain vulnerabilities. Exploiting this vulnerability can allow a malicious actor to compromise the...

9.4CVSS5.5AI score0.0006EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/05/23 12:0 a.m.2 views

The vulnerability of the Net::IMAP module in the Ruby programming language, which allows a hacker to trigger a service failure

The vulnerability of the Net::IMAP module in the Ruby programming language is related to uncontrolled memory allocation. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

7.8CVSS6.6AI score0.00393EPSS
Exploits0References12Affected Software6
BDU FSTEC
BDU FSTEC
added 2025/05/23 12:0 a.m.2 views

The vulnerability of the LibreOffice office software package, related to improper verification of the cryptographic signature, allows a perpetrator to forge digital signatures.

The vulnerability of the LibreOffice office software package is related to improper verification of the cryptographic signature. Exploiting this vulnerability could allow a malicious actor to forge digital signatures remotely...

10CVSS5.5AI score0.00092EPSS
Exploits0References13Affected Software8
BDU FSTEC
BDU FSTEC
added 2025/05/23 12:0 a.m.1 views

The vulnerability of the software for centralized backup and disaster recovery management in Dell PowerProtect Data Manager lies in the lack of mechanisms for encoding or shielding output data. This allows attackers to gain unauthorized access to protected information.

The vulnerability of the Dell PowerProtect Data Manager’s centralized backup and recovery software lies in the lack of mechanisms for encoding or shielding output data. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...

4.6CVSS5.5AI score0.00109EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/05/23 12:0 a.m.2 views

The vulnerability of the software for centralized backup and disaster recovery management in Dell PowerProtect Data Manager arises from improper code generation. This allows attackers to gain unauthorized access to protected information.

The vulnerability of the software for centralized backup and disaster recovery management in Dell PowerProtect Data Manager is related to improper code generation. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

4.6CVSS5.5AI score0.00114EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/05/23 12:0 a.m.2 views

The vulnerability of the create_lease_buf() function in the SMB subsystem of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the createleasebuf function in the SMB subsystem of Linux operating systems is related to pointer manipulation. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6.7AI score0.00013EPSS
Exploits0References11Affected Software3
BDU FSTEC
BDU FSTEC
added 2025/05/23 12:0 a.m.2 views

The vulnerability of the irqfd_shutdown() function in Linux kernel-based Xen driver support allows a attacker to trigger a service failure.

The vulnerability of the irqfdshutdown function in Xen kernel-based Linux operating system drivers is related to the reutilization of previously released memory. Exploiting this vulnerability could allow an attacker to trigger a service failure...

5.5CVSS6.2AI score0.00017EPSS
Exploits0References9Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/05/23 12:0 a.m.1 views

The vulnerability of the btrfs_lookup_extent_info() function in the file system of the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the btrfslookupextentinfo function in the file system of the Linux operating system is related to unauthorized callers of the verification function. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS6.6AI score0.00014EPSS
Exploits0References8Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/05/23 12:0 a.m.2 views

The vulnerability of the dcn315_populate_dml_pipes_from_context() function in the DRI driver for AMD Linux kernel-based graphics cards allows a attacker to cause a service failure.

The vulnerability of the dcn315populatedmlpipesfromcontext function in the DRI driver for AMD Linux kernel-based graphics cards is related to insufficient validation of input data during division by zero. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6.5AI score0.00028EPSS
Exploits0References10Affected Software3
BDU FSTEC
BDU FSTEC
added 2025/05/23 12:0 a.m.3 views

The vulnerability of the free_pages_prepare() function in the Linux kernel’s memory management subsystem allows a hacker to trigger a service failure.

The vulnerability of the freepagesprepare function in the Linux kernel’s memory management subsystem is related to the failure to release resources after their useful lifespan has ended. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS5.9AI score0.00081EPSS
Exploits0References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/05/23 12:0 a.m.3 views

The vulnerability of the dpcdcd_extend_address_range() function in the DRI driver for AMD graphics cards in Linux operating systems allows a malicious actor to cause a service failure.

The vulnerability of the dpcdcdextendaddressrange function in the DRI driver for AMD graphics cards in Linux operating systems is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS6.4AI score0.00017EPSS
Exploits0References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/05/23 12:0 a.m.6 views

The vulnerability of the iwl_mvm_rcu_dereference_vif_id() function in the Linux kernel’s wireless adapter driver allows a malicious actor to cause a service failure.

The vulnerability of the iwlmvmrcudereferencevifid function in the Linux kernel’s wireless adapter driver lies in its failure to handle exceptional conditions properly. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6.2AI score0.00019EPSS
Exploits0References10Affected Software3
BDU FSTEC
BDU FSTEC
added 2025/05/23 12:0 a.m.2 views

The vulnerability of the AdvSetMacMtuWan function in the microprogramming software for Tenda AC10 routers allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the AdvSetMacMtuWan function in the Tenda AC10 router software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

9CVSS5.5AI score0.00339EPSS
Exploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/05/23 12:0 a.m.1 views

The vulnerability of the sub_43fdcc function (/goform/SetNetControlList) in the Wi-Fi router software Tenda AX12 allows a hacker to trigger a service failure.

The vulnerability of the sub43fdcc function /goform/SetNetControlList in the Wi-Fi router software Tenda AX12 is related to the operation of writing data beyond the buffer in memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

6.8CVSS5.8AI score0.0038EPSS
Exploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/05/23 12:0 a.m.1 views

The vulnerability of the formSetSambaConf() function in the Tenda AC9 router software allows a hacker to execute arbitrary code.

The vulnerability of the formSetSambaConf function in the Tenda AC9 router software is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

6.5CVSS5.9AI score0.07109EPSS
Exploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/05/23 12:0 a.m.2 views

The vulnerability of the formSetCfm() function (/goform/setcfm) in the Tenda AC1206 router’s microprogramming software allows a hacker to execute arbitrary code.

The vulnerability of the formSetCfm function /goform/setcfm in the Tenda AC1206 router microprogramming software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

9CVSS8AI score0.00539EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/05/23 12:0 a.m.1 views

The vulnerability of the /goform/UserCongratulationsExec file in the Tenda AC10 router microprogramming system allows a hacker to execute arbitrary code.

The vulnerability of the /goform/UserCongratulationsExec microprogramming system for Tenda AC10 routers lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

9CVSS8AI score0.0075EPSS
Exploits0References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/05/23 12:0 a.m.1 views

The vulnerability of the adl_get_hybrid_cpu_type() function in the arch/x86/events/intel/core.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the adlgethybridcputype function in the arch/x86/events/intel/core.c module of the Linux operating system is related to insufficient checking of exception states. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS6.7AI score0.00021EPSS
Exploits4References14Affected Software4
BDU FSTEC
BDU FSTEC
added 2025/05/23 12:0 a.m.1 views

The vulnerability of the /goform/openSchedWifi component in the microprogramming software for Tenda TX3, which stems from copying buffers without checking the size of the input data, allows attackers to compromise the accessibility of protected information.

The vulnerability of the /goform/openSchedWifi component in the microprogramming-based routing software Tenda TX3 lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to compromise the accessibility of protected...

6.8CVSS6.6AI score0.00069EPSS
Exploits1References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/05/23 12:0 a.m.2 views

The vulnerability of the Telnet component of the Tenda AC9 microprogramming router allows a hacker to execute arbitrary commands.

The vulnerability of the Telnet component in the Tenda AC9 microprogramming system software is related to the failure to take measures to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

10CVSS5.9AI score0.04085EPSS
Exploits1References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/05/23 12:0 a.m.2 views

The vulnerability of the get_parentControl_list_Info function in the Tenda AC8V4 router microprogramming software allows a attacker to execute arbitrary code through a specially created parameter called deviceid.

The vulnerability of the getparentControllistInfo function in the Tenda AC8V4 router microprogramming system is related to reading data outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code through a specially created deviceid paramete...

7.8CVSS6.3AI score0.0044EPSS
Exploits1References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/05/23 12:0 a.m.3 views

The vulnerability of the /goform/SetNetControlList component in the Tenda TX3 router software allows a attacker to compromise the accessibility of protected information.

The vulnerability of the /goform/SetNetControlList component in the Tenda TX3 router software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to compromise the accessibility of protected information...

7.8CVSS6.6AI score0.00075EPSS
Exploits1References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/05/23 12:0 a.m.2 views

The vulnerability of the SSH-server software solution for monitoring the status of B&R APROL industrial systems allows a intruder to influence the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the SSH-server software solution for monitoring the status of B&R APROL industrial systems is related to incomplete filtering of specific elements. Exploiting this vulnerability could allow an intruder to compromise the confidentiality, integrity, and accessibility of the...

7.8CVSS5.5AI score0.00099EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/05/23 12:0 a.m.2 views

The vulnerability of the B&R APROL software solution for monitoring the status of industrial systems lies in its improper handling of insufficient permissions or privileges. This allows a intruder to gain unauthorized access to the database.

The vulnerability of the B&R APROL software solution for monitoring the status of industrial systems is related to improper handling of insufficient permissions or privileges. Exploiting this vulnerability can allow an intruder to gain unauthorized access to the database...

5.5CVSS5.5AI score0.00104EPSS
Exploits0References2Affected Software1
Total number of security vulnerabilities74701