CVE-2024-8807

CVE-2024-8807 : Cohesive Networks VNS3 has a command injection vulnerability in its web service (listening on port 8000 by default). The flaw stems from insufficient validation of a user-supplied string before it is used to execute a system call, allowing an attacker to run code with root privile...

CVE-2024-8808

CVE-2024-8808 affects Cohesive Networks VNS3. The risk stems from a flaw in the web service (listening on port 8000) where a user-supplied string is used to construct a system call without proper validation, allowing remote code execution with root privileges. Auth is required to exploit, and the...

CVE-2024-8806

CVE-2024-8806 affects Cohesive Networks VNS3. The flaw is a command-injection in the web service (listening on TCP port 8000) where unsafely user-supplied input is used to execute a system call, allowing an attacker to run code with root privileges. Evidence across sources confirms remote, unauth...

CVE-2024-8809

CVE-2024-8809 affects Cohesive Networks VNS3. The vulnerability is a command-injection in the web service (listening on TCP port 8000) where unsanitized user input is passed to a system call, allowing remote code execution in the root context. Access requires authentication. The issue is identifi...

CVE-2020-15467

CVE-2020-15467 affects Cohesive Networks vns3:vpn appliances up to and including version 4.11.0; the administrative interface is vulnerable to authenticated remote code execution that can lead to server compromise. CVSSv3.1 base score 8.8 (Network, Low attack complexity, Low privileges required, ...