iopsys vulnerabilities and exploits

(subscribe to this query)

Inteno iopsys 2.0-3.14 and 4.0 devices allow remote authenticated users to execute arbitrary OS commands by modifying the leasetrigger field in the odhcpd configuration to specify an arbitrary program, as demonstrated by a program located on an SMB share. This issue existed becau...

Intenogroup Iopsys Intenogroup Iopsys 4.0

1 EDB exploit1 Github repository

An issue exists in the firewall3 component in Inteno IOPSYS 1.0 up to and including 3.16. The attacker must make a JSON-RPC method call to add a firewall rule as an "include" and point the "path" argument to a malicious script or binary. This gets executed as ...

p910nd on Inteno IOPSYS 2.0 up to and including 4.2.0 allows remote malicious users to read, or append data to, arbitrary files via requests on TCP port 9100.

Intenogroup Iopsys Firmware

1 EDB exploit

read_tmp and write_tmp in Inteno IOPSYS allow malicious users to gain privileges after writing to /tmp/etc/smb.conf because /var is a symlink to /tmp.

Intenogroup Iopsys Firmware -

1 EDB exploit1 Github repository

Inteno EG200 EG200-WU7P1U_ADAMO3.16.4-190226_1650 routers have a JUCI ACL misconfiguration that allows the "user" account to extract the 3DES key via JSON commands to ubus. The 3DES key is used to decrypt the provisioning file provided by Adamo Telecom on a public URL v...

Intenogroup Eg200 Firmware Eg200-wu7p1u Adamo3.16.4-190226 1650

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook