Vulnerabilidades

A vulnerability was determined in TOTOLINK N600R 4.3.0cu.7866_B20220506. This vulnerability affects the function sub_4159F8 of the file /web_cste/cgi-bin/cstecgi.cgi. Executing manipulation can lead to command injection. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized.

A vulnerability was found in TOTOLINK X5000R 9.1.0cu.2415_B20250515. This affects the function sub_410C34 of the file /cgi-bin/cstecgi.cgi. Performing manipulation of the argument pid results in command injection. Remote exploitation of the attack is possible. The exploit has been made public and could be used.

A vulnerability in the Ruijie RG-ES series switch firmware ESW_1.0(1)B1P39 enables remote attackers to fully bypass authentication mechanisms, providing them with unrestricted access to alter administrative settings and potentially seize control of affected devices via crafted HTTP POST request to /user.cgi.

A vulnerability in the directory permissions of Cisco Desk Phone 9800 Series, Cisco IP Phone 7800 and 8800 Series, and Cisco Video Phone 8875 could allow an unauthenticated, remote attacker to access sensitive information on an affected device. This vulnerability exists because the product exposes sensitive…

A vulnerability in the directory permissions of Cisco Desk Phone 9800 Series, Cisco IP Phone 7800 and 8800 Series, and Cisco Video Phone 8875 could allow an unauthenticated, remote attacker to write arbitrary files on an affected device. This vulnerability is due to a lack of proper authentication controls. An…

An OS command injection vulnerability exists in PLDT WiFi Router's Prolink PGN6401V Firmware 8.1.2 web management interface. The ping6.asp page submits user input to the /boaform/formPing6 endpoint via the pingAddr parameter, which is not properly sanitized. An authenticated attacker can exploit this flaw by injecting…

Tenda AC8 v16.03.34.06 is vulnerable to Buffer Overflow in the formWifiBasicSet function via the parameter security or security_5g.

An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 9110, W920, W930, W1000, Modem 5123, Modem 5300, and Modem 5400. A programming mistake for buffer copy leads to out-of-bounds writes via malformed ROHC packets.

Se determinó una vulnerabilidad en Tenda CP6 11.10.00.243. El elemento afectado es la función sub_2B7D04 del componente uhttp. La ejecución de manipulación puede conducir a un algoritmo criptográfico arriesgado. El ataque puede lanzarse remotamente. Este ataque se caracteriza por una alta complejidad. La…

Wavlink WN535K3 20191010 was found to contain a command injection vulnerability in the set_sys_adm function via the username parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.

Wavlink WN535K3 20191010 was found to contain a command injection vulnerability in the set_sys_cmd function via the command parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.

Wavlink AC1200 with firmware versions M32A3_V1410_230602 and M32A3_V1410_240222 are vulnerable to a post-authentication command injection while resetting the password. This vulnerability is specifically found within the "set_sys_adm" function of the "adm.cgi" binary, and is due to improper santization of the user…

E3 Site Supervisor (firmware version < 2.31F01) has a default admin user "ONEDAY" with a daily generated password. An attacker can predictably generate the password for ONEDAY. The oneday user cannot be deleted or modified by any user.

Los paquetes de actualización de firmware de E3 Site Supervisor Control (versión de firmware &lt; 2.31F01) no están firmados. Un atacante puede falsificar paquetes de actualización de firmware maliciosos. Un atacante con acceso de administrador a los servicios de la aplicación puede instalar una actualización de…

E3 Site Supervisor Control (versión de firmware &lt; 2.31F01) genera la contraseña de root de Linux en cada arranque. Un atacante puede generar la contraseña de root de Linux para un dispositivo vulnerable basándose en parámetros conocidos o fáciles de obtener.

E3 Site Supervisor Control (firmware version < 2.31F01) MGW contains an API call that lacks input validation. An attacker can use this command to continuously crash the application services.

E3 Site Supervisor Control (firmware version < 2.31F01) has a floor plan feature that allows for an unauthenticated attacker to upload floor plan files. By uploading a specially crafted floor plan file, an attacker can inject a stored XSS to the floorplan web page.

E3 Site Supervisor Control (firmware version < 2.31F01) RCI service contains an API call to read users info, which returns all usernames and password hashes for the application services.

E3 Site Supervisor Control (firmware version < 2.31F01) has a floor plan feature that allows for an unauthenticated attacker to upload floor plan files. By uploading a specially crafted floor plan file, an attacker can access any file from the E3 file system.

E3 Site Supervisor Control (firmware version < 2.31F01) application services (MGW and RCI) uses client side hashing for authentication. An attacker can authenticate by obtaining only the password hash.

E3 Site Supervisor Control (versión de firmware menor que 2.31F01) contiene una llamada API oculta en los servicios de la aplicación que habilita SSH y Shellinabox, que existen pero están deshabilitados por defecto. Un atacante con acceso de administrador a los servicios de la aplicación puede utilizar esta API para…

Se identificó una vulnerabilidad en Tenda CH22 1.0.0.1. Este problema afecta a la función formSetSambaConf del archivo /goform/SetSambaConf. La manipulación del argumento samba_userNameSda conduce a un desbordamiento de búfer. Es posible iniciar el ataque de forma remota. El exploit está disponible públicamente y…

Se determinó una vulnerabilidad en Tenda CH22 1.0.0.1. Esta vulnerabilidad afecta a la función formexeCommand del archivo /goform/exeCommand. La manipulación del argumento cmdinput puede conducir a un desbordamiento de búfer. El ataque puede realizarse de forma remota. El exploit ha sido divulgado públicamente y puede…

ESPHome is a system to control microcontrollers remotely through Home Automation systems. In version 2025.8.0 in the ESP-IDF platform, ESPHome's web_server authentication check can pass incorrectly when the client-supplied base64-encoded Authorization value is empty or is a substring of the correct value. This allows…

Una vulnerabilidad se determinó en Tenda F1202 1.2.0.9/1.2.0.14/1.2.0.20. Afectada es una función desconocida del archivo /etc_ro/shadow del componente Interfaz Administrativa. Esta manipulación con la entrada Fireitup causa credenciales codificadas de forma rígida. El ataque solo puede ser ejecutado localmente. Un…