Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

t. weber vulnerabilities and exploits

(subscribe to this query)
6.1
CVSSv3
CVE-2021-39278
Certain MOXA devices allow reflected XSS via the Config Import menu. This affects WAC-2004 1.7, WAC-1001 2.1, WAC-1001-T 2.1, OnCell G3470A-LTE-EU 1.7, OnCell G3470A-LTE-EU-T 1.7, TAP-323-EU-CT-T 1.3, TAP-323-US-CT-T 1.3, TAP-323-JP-CT-T 1.3, WDR-3124A-EU 2.3, WDR-3124A-EU-T 2.3,...
Moxa Wac-2004 Firmware 1.7Moxa Wac-1001 Firmware 2.1Moxa Wac-1001-t Firmware 2.1Moxa Oncell G3470a-lte-eu Firmware 1.7Moxa Oncell G3470a-lte-eu-t Firmware 1.7Moxa Tap-323-eu-ct-t Firmware 1.3Moxa Tap-323-us-ct-t Firmware 1.3Moxa Tap-323-jp-ct-t Firmware 1.3Moxa Wdr-3124a-eu Firmware 2.3Moxa Wdr-3124a-eu-t Firmware 2.3Moxa Wdr-3124a-us Firmware 2.3Moxa Wdr-3124a-us-t Firmware 2.3
8.8
CVSSv3
CVE-2021-39279
Certain MOXA devices allow Authenticated Command Injection via /forms/web_importTFTP. This affects WAC-2004 1.7, WAC-1001 2.1, WAC-1001-T 2.1, OnCell G3470A-LTE-EU 1.7, OnCell G3470A-LTE-EU-T 1.7, TAP-323-EU-CT-T 1.3, TAP-323-US-CT-T 1.3, TAP-323-JP-CT-T 1.3, WDR-3124A-EU 2.3, WD...
Moxa Wac-2004 Firmware 1.7Moxa Wac-1001 Firmware 2.1Moxa Wac-1001-t Firmware 2.1Moxa Oncell G3470a-lte-eu Firmware 1.7Moxa Oncell G3470a-lte-eu-t Firmware 1.7Moxa Tap-323-eu-ct-t Firmware 1.3Moxa Tap-323-us-ct-t Firmware 1.3Moxa Tap-323-jp-ct-t Firmware 1.3Moxa Wdr-3124a-eu Firmware 2.3Moxa Wdr-3124a-eu-t Firmware 2.3Moxa Wdr-3124a-us Firmware 2.3Moxa Wdr-3124a-us-t Firmware 2.3
NA
CVE-2011-2716
The DHCP client (udhcpc) in BusyBox prior to 1.20.0 allows remote DHCP servers to execute arbitrary commands via shell metacharacters in the (1) HOST_NAME, (2) DOMAIN_NAME, (3) NIS_DOMAIN, and (4) TFTP_SERVER_NAME host name options.
T-mobile Tm-ac1900 3.0.0.4.376 3169Busybox Busybox 1.18.5Busybox Busybox 1.18.4Busybox Busybox 1.17.2Busybox Busybox 1.18.3Busybox Busybox 1.18.2Busybox Busybox 1.17.0Busybox Busybox 1.16.2Busybox Busybox 1.16.1Busybox Busybox 1.14.3Busybox Busybox 1.14.2Busybox Busybox 1.13.0Busybox Busybox 1.12.4Busybox Busybox 1.11.0Busybox Busybox 1.10.4Busybox Busybox 1.9.0Busybox Busybox 1.8.2Busybox Busybox 1.6.1Busybox Busybox 1.6.0Busybox Busybox 1.3.0Busybox Busybox 1.2.2.1Busybox Busybox 1.1.0
5.5
CVSSv3
CVE-2014-9645
The add_probe function in modutils/modprobe.c in BusyBox prior to 1.23.0 allows local users to bypass intended restrictions on loading kernel modules via a / (slash) character in a module name, as demonstrated by an "ifconfig /usbserial up" command or a "mount -t /...
Busybox Busybox
NA
CVE-2013-1813
util-linux/mdev.c in BusyBox prior to 1.21.0 uses 0777 permissions for parent directories when creating nested directories under /dev/, which allows local users to have unknown impact and attack vectors.
Redhat Enterprise Linux 6.0T-mobile Tm-ac1900 3.0.0.4.376 3169Busybox Busybox 0.38Busybox Busybox 0.46Busybox Busybox 0.47Busybox Busybox 0.60.1Busybox Busybox 0.60.2Busybox Busybox 0.60.3Busybox Busybox 1.1.2Busybox Busybox 1.1.3Busybox Busybox 1.11.1Busybox Busybox 1.11.2Busybox Busybox 1.13.1Busybox Busybox 1.13.2Busybox Busybox 1.14.4Busybox Busybox 1.15.0Busybox Busybox 1.17.0Busybox Busybox 1.17.1Busybox Busybox 1.18.4Busybox Busybox 1.18.5Busybox Busybox 1.2.2Busybox Busybox 1.2.2.1
8.8
CVSSv3
CVE-2022-40005
Intelbras WiFiber 120AC inMesh prior to 1-1-220826 allows command injection by authenticated users, as demonstrated by the /boaform/formPing6 and /boaform/formTracert URIs for ping and traceroute.
Intelbras Wifiber 120ac Inmesh Firmware
8.8
CVSSv3
CVE-2022-40282
The web server of Hirschmann BAT-C2 prior to 09.13.01.00R04 allows authenticated command injection. This allows an authenticated malicious user to pass commands to the shell of the system because the dir parameter of the FsCreateDir Ajax function is not sufficiently sanitized. Th...
Belden Hirschmann Bat-c2 Firmware
5.5
CVSSv3
CVE-2015-9261
huft_build in archival/libarchive/decompress_gunzip.c in BusyBox prior to 1.27.2 misuses a pointer, causing segfaults and an application crash during an unzip operation on a specially crafted ZIP file.
Busybox BusyboxDebian Debian Linux 8.0Debian Debian Linux 9.0Canonical Ubuntu Linux 16.04Canonical Ubuntu Linux 14.04
7.5
CVSSv3
CVE-2016-2147
Integer overflow in the DHCP client (udhcpc) in BusyBox prior to 1.25.0 allows remote malicious users to cause a denial of service (crash) via a malformed RFC1035-encoded domain name, which triggers an out-of-bounds heap write.
Busybox BusyboxDebian Debian Linux 8.0Debian Debian Linux 9.0Canonical Ubuntu Linux 14.04Canonical Ubuntu Linux 16.04Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 18.10
9.8
CVSSv3
CVE-2016-2148
Heap-based buffer overflow in the DHCP client (udhcpc) in BusyBox prior to 1.25.0 allows remote malicious users to have unspecified impact via vectors involving OPTION_6RD parsing.
Busybox BusyboxDebian Debian Linux 8.0Debian Debian Linux 9.0Canonical Ubuntu Linux 14.04Canonical Ubuntu Linux 16.04Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 18.10
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-21111CVE-2024-32884IDORCVE-2023-1000CVE-2024-33260CVE-2024-3682reflected XSSrace conditionCVE-2024-3400
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook