Lucene search

K
NetmoduleNetmodule Router Software

4 matches found

CVE
CVE
added 2021/08/23 5:15 a.m.68 views

CVE-2021-39291

Certain NetModule devices allow credentials via GET parameters to CLI-PHP. These models with firmware before 4.3.0.113, 4.4.0.111, and 4.5.0.105 are affected: NB800, NB1600, NB1601, NB1800, NB1810, NB2700, NB2710, NB2800, NB2810, NB3700, NB3701, NB3710, NB3711, NB3720, and NB3800.

8.8CVSS9AI score0.00615EPSS
CVE
CVE
added 2023/02/16 9:15 a.m.50 views

CVE-2023-0861

NetModule NSRW web administration interface executes an OS command constructed with unsanitized user input. A successful exploit could allow an authenticated user to execute arbitrary commands with elevated privileges.This issue affects NSRW: from 4.3.0.0 before 4.3.0.119, from 4.4.0.0 before 4.4.0...

8.8CVSS7.7AI score0.01497EPSS
CVE
CVE
added 2023/10/22 9:15 p.m.49 views

CVE-2023-46306

The web administration interface in NetModule Router Software (NRSW) 4.6 before 4.6.0.106 and 4.8 before 4.8.0.101 executes an OS command constructed with unsanitized user input: shell metacharacters in the /admin/gnssAutoAlign.php device_id parameter. This occurs because another thread can be star...

8.4CVSS7.9AI score0.01497EPSS
CVE
CVE
added 2023/02/16 10:15 a.m.35 views

CVE-2023-0862

The NetModule NSRW web administration interface is vulnerable to path traversals, which could lead to arbitrary file uploads and deletion. By uploading malicious files to the web root directory, authenticated users could gain remote command execution with elevated privileges. This issue affects NSR...

8.8CVSS7.5AI score0.00937EPSS