VARIoT IoT vulnerabilities database

OS command injection vulnerability in ELECOM wireless LAN routers allows an attacker who can access the product to execute an arbitrary OS command by sending a specially crafted request. Affected products and versions are as follows: WRC-F1167ACF all versions, WRC-1750GHBK all versions, WRC-1167GHBK2 all versions, WRC-1750GHBK2-I all versions, and WRC-1750GHBK-E all versions. Network equipment provided by ELECOM Co., Ltd. and Logitech Co., Ltd. contains the following multiple vulnerabilities. Reporter : Zero Zero One Co., Ltd. Hayakawa Soraya MrThe expected impact depends on each vulnerability, but it may be affected as follows. It was * A third party with access to the product logs into a specific operation screen and performs arbitrary operations. OS Command is executed - CVE-2023-32626 , CVE-2023-35991 It was * by a third party who has access to the product; telnet logged into the service - CVE-2023-38132 It was * A third party who can log in to the product may perform arbitrary actions from a specific operation screen

Hidden functionality vulnerability in LAN-WH300N/RE all versions provided by LOGITEC CORPORATION allows an authenticated user to execute arbitrary OS commands on a certain management console. Network equipment provided by ELECOM Co., Ltd. and Logitech Co., Ltd. contains the following multiple vulnerabilities. * Unpublished features (CWE-912) - CVE-2023-32626 , CVE-2023-35991 , CVE-2023-39445 It was * Telnet Inadequate access restrictions to services (CWE-284) - CVE-2023-38132 It was * Unpublished features (CWE-912) - CVE-2023-38576 It was * buffer overflow (CWE-120) - CVE-2023-39454 It was * OS Command injection (CWE-78) - CVE-2023-39455 , CVE-2023-40072 It was * OS Command injection (CWE-78) - CVE-2023-39944 , CVE-2023-40069 This vulnerability information is JPCERT/CC Report to JPCERT/CC Coordinated with the developer. Reporter : Zero Zero One Co., Ltd. Hayakawa Soraya MrThe expected impact depends on each vulnerability, but it may be affected as follows. It was * A third party with access to the product logs into a specific operation screen and performs arbitrary operations. OS Command is executed - CVE-2023-32626 , CVE-2023-35991 It was * by a third party who has access to the product; telnet logged into the service - CVE-2023-38132 It was * A third party who can log in to the product may perform arbitrary actions from a specific operation screen. OS Command is executed - CVE-2023-38576 It was * A third party with access to the product sends a specially crafted file to a specific operation screen and executes arbitrary code. - CVE-2023-39445 It was * Arbitrary code can be executed by a third party who has access to the product - CVE-2023-39454 It was * A third party who can log in to the product sends a specially crafted request and sends an arbitrary request. OS Command is executed - CVE-2023-39455 , CVE-2023-40072 It was * A third party with access to the product may send a specially crafted request to OS Command is executed - CVE-2023-39944 , CVE-2023-40069

OS command injection vulnerability in WRC-F1167ACF all versions, and WRC-1750GHBK all versions allows an attacker who can access the product to execute an arbitrary OS command by sending a specially crafted request. Network equipment provided by ELECOM Co., Ltd. and Logitech Co., Ltd. contains the following multiple vulnerabilities. Reporter : Zero Zero One Co., Ltd. Hayakawa Soraya MrThe expected impact depends on each vulnerability, but it may be affected as follows. It was * A third party with access to the product logs into a specific operation screen and performs arbitrary operations. OS Command is executed - CVE-2023-32626 , CVE-2023-35991 It was * by a third party who has access to the product; telnet logged into the service - CVE-2023-38132 It was * A third party who can log in to the product may perform arbitrary actions from a specific operation screen

A post-authentication command injection vulnerability in the NTP feature of Zyxel NBG6604 firmware version V1.01(ABIR.1)C0 could allow an authenticated attacker to execute some OS commands remotely by sending a crafted HTTP request. (DoS) It may be in a state. Zyxel NBG6604 is a dual-band wireless router made by China Zyxel. There is a command injection vulnerability in Zyxel NBG6604 V1.01(ABIR.1)C0. The vulnerability stems from the failure to properly filter special characters, commands, etc. in constructing commands in the NTP function

The Linux DVS server component of Mitel MiVoice Connect through 19.3 SP2 (22.24.1500.0) could allow an unauthenticated attacker with internal network access to execute arbitrary scripts due to improper access control. Mitel Networks Corporation of MiVoice Connect Exists in a fraudulent authentication vulnerability.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be in a state

Magic R365 is a full Gigabit wireless router. H3C Technology Co., Ltd. Magic R365 has a binary vulnerability, which can be used by attackers to execute arbitrary commands.

H3C B6 is a Gigabit dual-band router. There is a binary vulnerability in H3C B6, which can be exploited by attackers to cause the process to crash.

H3C R230 is a home wireless router. There is a binary vulnerability in H3C R230, which can be exploited by attackers to cause the process to crash.

Magic R365 router is a wireless router produced by H3C Technology Co., Ltd. (H3C). There is a binary vulnerability in Magic R365 of H3C Technology Co., Ltd., which can be used by attackers to gain control of the server.

Improper buffer restrictions in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access. nuc 8 compute element cm8i3cb4n firmware, nuc 8 compute element cm8i5cb8n firmware, nuc 8 compute element cm8i7cb8n Multiple Intel products such as firmware contain a buffer error vulnerability.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be in a state

Improper initialization in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable information disclosure via local access. nuc 7 enthusiast nuc7i7bnkq firmware, nuc 7 enthusiast nuc7i7bnhxg firmware, nuc kit nuc7i7dnhe Multiple Intel products, including firmware, have vulnerabilities related to initialization.Information may be obtained

Improper input validation in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access. nuc rugged kit nuc8cchb firmware, nuc rugged kit nuc8cchbn firmware, nuc rugged kit nuc8cchkrn Multiple Intel products such as firmware have unspecified vulnerabilities.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be in a state

Race condition in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access. nuc rugged kit nuc8cchb firmware, nuc rugged kit nuc8cchbn firmware, nuc rugged kit nuc8cchkrn A race condition vulnerability exists in multiple Intel products such as firmware.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be in a state

Improper input validation in some Intel(R) NUC Rugged Kit, Intel(R) NUC Kit and Intel(R) Compute Element BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access. nuc kit nuc7i7bnhx1 firmware, nuc 7 home nuc7i5bnkp firmware, nuc 7 home nuc7i3bnhxf Multiple Intel products such as firmware have unspecified vulnerabilities.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be in a state

Improper access control in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable denial of service via local access. Intel NUC Kit NUC6CAYH firmware, Intel NUC Kit NUC6CAYS firmware, nuc mini pc nuc7i3bnhxf Multiple Intel products such as firmware have unspecified vulnerabilities.Service operation interruption (DoS) It may be in a state

H3C Technology Co., Ltd. Magic R365 is a full Gigabit wireless router. H3C Technology Co., Ltd. Magic R365 has a command execution vulnerability, which can be exploited by attackers to gain control of the server.

Improper sanitization of incoming intent in Galaxy Store prior to version 4.5.56.6?allows local attackers to access privileged content providers as Galaxy Store permission. Samsung's Galaxy Store Exists in a fraudulent authentication vulnerability.Information may be obtained

Magic R365 router is a wireless router produced by H3C Technology Co., Ltd. (H3C). H3C Technology Co., Ltd. Magic R365 has a binary vulnerability, which can be exploited by attackers to gain control of the server.

H3C B5 is a router product of H3C Technology Co., Ltd. H3C B5 has an unauthorized access vulnerability. Attackers can use this vulnerability to bypass identity verification by constructing a special request packet to obtain sensitive information of the router.

Arris VAP2500, a device launched by Arris Group, is a video gateway and WIFI signal booster for extending home network coverage and providing wireless connectivity. Arris VAP2500 has a remote code execution vulnerability. The vulnerability stems from the fact that the list_mac_address.php file does not strictly filter and restrict the macaddr parameters passed in by users. Attackers can use this vulnerability to cause command injection through carefully constructed macaddr parameters.