Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-0276 State: PUBLISHED Published: 2024-01-07T12:31:04.048Z Last Updated: 2025-06-17T20:29:14.956Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Kashipara Products: Food Management System Problem Types: CWE-89 Description: A vulnerability classified as critical has been found in Kashipara Food Management System up to 1.0. This affects an unknown part of the file rawstock_used_damaged_smt.php. The manipulation of the argument product_name leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-249831. Additional Analyst Notes: - CVE
e public and may be used. The associated identifier of this vulnerability is VDB-249831. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.249831 - https://vuldb.com/?ctiid.249831 - https://github.com/E1CHO/cve_hub/blob/main/Food%20Management%20System/Food%20Management%20System%20-%20vuln%205.pdf
CVE ID: CVE-2024-0277 State: PUBLISHED Published: 2024-01-07T13:00:05.458Z Last Updated: 2024-11-14T18:08:59.985Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Kashipara Products: Food Management System Problem Types: CWE-89 Description: A vulnerability classified as critical was found in Kashipara Food Management System up to 1.0. This vulnerability affects unknown code of the file party_submit.php. The manipulation of the argument party_name leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-249832. Additional Analyst Notes: - CVE Program Container: - CISA ADP
used. The identifier of this vulnerability is VDB-249832. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.249832 - https://vuldb.com/?ctiid.249832 - https://github.com/E1CHO/cve_hub/blob/main/Food%20Management%20System/Food%20Management%20System%20-%20vuln%209.pdf
CVE ID: CVE-2024-0278 State: PUBLISHED Published: 2024-01-07T13:31:03.800Z Last Updated: 2025-06-17T20:29:15.184Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Kashipara Products: Food Management System Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, has been found in Kashipara Food Management System up to 1.0. This issue affects some unknown processing of the file partylist_edit_submit.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-249833 was assigned to this vulnerability. Additional Analyst Notes: - CV
the public and may be used. The identifier VDB-249833 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.249833 - https://vuldb.com/?ctiid.249833 - https://github.com/E1CHO/cve_hub/blob/main/Food%20Management%20System/Food%20Management%20System%20-%20vuln%2010.pdf
CVE ID: CVE-2024-0279 State: PUBLISHED Published: 2024-01-07T14:00:04.215Z Last Updated: 2025-06-17T20:29:15.313Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Kashipara Products: Food Management System Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, was found in Kashipara Food Management System up to 1.0. Affected is an unknown function of the file item_list_edit.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-249834 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Contai
may be used. VDB-249834 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.249834 - https://vuldb.com/?ctiid.249834 - https://github.com/E1CHO/cve_hub/blob/main/Food%20Management%20System/Food%20Management%20System%20-%20vuln%2011.pdf
CVE ID: CVE-2024-0280 State: PUBLISHED Published: 2024-01-07T14:31:03.462Z Last Updated: 2025-06-03T14:39:43.233Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Kashipara Products: Food Management System Problem Types: CWE-89 Description: A vulnerability has been found in Kashipara Food Management System up to 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file item_type_submit.php. The manipulation of the argument type_name leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-249835. Additional Analyst N
losed to the public and may be used. The associated identifier of this vulnerability is VDB-249835. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.249835 - https://vuldb.com/?ctiid.249835 - https://github.com/E1CHO/cve_hub/blob/main/Food%20Management%20System/Food%20Management%20System%20-%20vuln%2012.pdf
CVE ID: CVE-2024-0281 State: PUBLISHED Published: 2024-01-07T15:00:06.256Z Last Updated: 2025-06-17T14:39:40.181Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Kashipara Products: Food Management System Problem Types: CWE-89 Description: A vulnerability was found in Kashipara Food Management System up to 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file loginCheck.php. The manipulation of the argument password leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-249836. Additional Analyst Notes: - CVE Program Container
c and may be used. The identifier of this vulnerability is VDB-249836. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.249836 - https://vuldb.com/?ctiid.249836 - https://github.com/E1CHO/cve_hub/blob/main/Food%20Management%20System/Food%20Management%20System%20-%20vuln%2013.pdf
CVE ID: CVE-2024-0282 State: PUBLISHED Published: 2024-01-07T15:31:03.431Z Last Updated: 2025-04-17T18:29:52.204Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: Kashipara Products: Food Management System Problem Types: CWE-79 Description: A vulnerability was found in Kashipara Food Management System up to 1.0. It has been classified as problematic. This affects an unknown part of the file addmaterialsubmit.php. The manipulation of the argument tin leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-249837 was assigned to this vulnerability. Additional Analyst Notes: - CVE P
public and may be used. The identifier VDB-249837 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.249837 - https://vuldb.com/?ctiid.249837 - https://github.com/E1CHO/cve_hub/blob/main/Food%20Management%20System/Food%20Management%20System%20-%20vuln%2014.pdf
CVE ID: CVE-2024-0283 State: PUBLISHED Published: 2024-01-07T16:00:05.025Z Last Updated: 2025-05-16T15:42:22.656Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: Kashipara Products: Food Management System Problem Types: CWE-79 Description: A vulnerability was found in Kashipara Food Management System up to 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file party_details.php. The manipulation of the argument party_name leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-249838 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE
he public and may be used. VDB-249838 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.249838 - https://vuldb.com/?ctiid.249838 - https://github.com/E1CHO/cve_hub/blob/main/Food%20Management%20System/Food%20Management%20System%20-%20vuln%2015.pdf
CVE ID: CVE-2024-0284 State: PUBLISHED Published: 2024-01-07T17:00:05.778Z Last Updated: 2025-06-03T14:39:27.175Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: Kashipara Products: Food Management System Problem Types: CWE-79 Description: A vulnerability was found in Kashipara Food Management System up to 1.0. It has been rated as problematic. This issue affects some unknown processing of the file party_submit.php. The manipulation of the argument party_address leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-249839. Additional Analyst Notes: -
the public and may be used. The associated identifier of this vulnerability is VDB-249839. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.249839 - https://vuldb.com/?ctiid.249839 - https://github.com/E1CHO/cve_hub/blob/main/Food%20Management%20System/Food%20Management%20System%20-%20vuln%2016.pdf
CVE ID: CVE-2024-0285 State: PUBLISHED Published: 2024-02-02T06:19:04.691Z Last Updated: 2025-05-07T20:08:47.274Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:L) Vendors: OpenHarmony Products: OpenHarmony Problem Types: CWE-20 Description: in OpenHarmony v4.0.0 and prior versions allow a local attacker cause DOS through improper input. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2024/2024-02.md
CVE ID: CVE-2024-0286 State: PUBLISHED Published: 2024-01-07T17:31:04.014Z Last Updated: 2025-06-17T20:29:15.486Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N) Vendors: PHPGurukul Products: Hospital Management System Problem Types: CWE-79 Description: A vulnerability, which was classified as problematic, was found in PHPGurukul Hospital Management System 1.0. This affects an unknown part of the file index.php#contact_us of the component Contact Form. The manipulation of the argument Name/Email/Message leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability
remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-249843. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.249843 - https://vuldb.com/?ctiid.249843 - https://drive.google.com/file/d/1MkVtMe63h5TlZvcC_Hc1fn6dn-jwNR8l/view?usp=sharing
CVE ID: CVE-2024-0287 State: PUBLISHED Published: 2024-01-07T23:00:06.698Z Last Updated: 2025-06-17T20:29:15.618Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Kashipara Products: Food Management System Problem Types: CWE-89 Description: A vulnerability was found in Kashipara Food Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file itemBillPdf.php. The manipulation of the argument printid leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-249848. Additional Analyst Notes: - CVE Program Container:
and may be used. The identifier of this vulnerability is VDB-249848. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.249848 - https://vuldb.com/?ctiid.249848 - https://github.com/laoquanshi/heishou/blob/main/Food%20Management%20System%20SQL%20Injection%20Vulnerability5.md
CVE ID: CVE-2024-0288 State: PUBLISHED Published: 2024-01-07T23:31:03.842Z Last Updated: 2025-06-17T20:29:15.747Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Kashipara Products: Food Management System Problem Types: CWE-89 Description: A vulnerability classified as critical has been found in Kashipara Food Management System 1.0. This affects an unknown part of the file rawstock_used_damaged_submit.php. The manipulation of the argument product_name leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-249849 was assigned to this vulnerability. Additional Analyst Notes: - CVE Pro
ublic and may be used. The identifier VDB-249849 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.249849 - https://vuldb.com/?ctiid.249849 - https://github.com/laoquanshi/heishou/blob/main/Food%20Management%20System%20SQL%20Injection%20Vulnerability12.md
CVE ID: CVE-2024-0289 State: PUBLISHED Published: 2024-01-08T00:00:07.097Z Last Updated: 2025-06-13T19:05:43.396Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Kashipara Products: Food Management System Problem Types: CWE-89 Description: A vulnerability classified as critical was found in Kashipara Food Management System 1.0. This vulnerability affects unknown code of the file stock_entry_submit.php. The manipulation of the argument itemype leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-249850 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CI
ed. VDB-249850 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.249850 - https://vuldb.com/?ctiid.249850 - https://github.com/laoquanshi/heishou/blob/main/Food%20Management%20System%20SQL%20Injection%20Vulnerability14.md
CVE ID: CVE-2024-0290 State: PUBLISHED Published: 2024-01-08T00:31:04.061Z Last Updated: 2025-04-17T18:12:03.263Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Kashipara Products: Food Management System Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, has been found in Kashipara Food Management System 1.0. This issue affects some unknown processing of the file stock_edit.php. The manipulation of the argument item_type leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-249851. Additional Analyst Notes: - CVE Program
and may be used. The associated identifier of this vulnerability is VDB-249851. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.249851 - https://vuldb.com/?ctiid.249851 - https://github.com/laoquanshi/heishou/blob/main/Food%20Management%20System%20SQL%20Injection%20Vulnerability15.md
CVE ID: CVE-2024-0291 State: PUBLISHED Published: 2024-01-08T01:00:05.126Z Last Updated: 2025-05-16T15:34:12.894Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Totolink Products: LR1200GB Problem Types: CWE-77 Description: A vulnerability was found in Totolink LR1200GB 9.1.0u.6619_B20230130. It has been rated as critical. This issue affects the function UploadFirmwareFile of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument FileName leads to command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-249857 was assigned to this vulnerability. NOTE: The vendor was contacted early about t
may be used. The identifier VDB-249857 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.249857 - https://vuldb.com/?ctiid.249857 - https://github.com/jylsec/vuldb/blob/main/TOTOLINK/LR1200GB/UploadFirmwareFile/README.md
CVE ID: CVE-2024-0292 State: PUBLISHED Published: 2024-01-08T02:00:05.783Z Last Updated: 2024-08-01T18:04:48.453Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Totolink Products: LR1200GB Problem Types: CWE-78 Description: A vulnerability classified as critical has been found in Totolink LR1200GB 9.1.0u.6619_B20230130. Affected is the function setOpModeCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument hostName leads to os command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-249858 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this di
be used. VDB-249858 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.249858 - https://vuldb.com/?ctiid.249858 - https://github.com/jylsec/vuldb/blob/main/TOTOLINK/LR1200GB/setOpModeCfg/README.md
CVE ID: CVE-2024-0293 State: PUBLISHED Published: 2024-01-08T02:31:04.198Z Last Updated: 2025-06-03T14:38:39.829Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Totolink Products: LR1200GB Problem Types: CWE-78 Description: A vulnerability classified as critical was found in Totolink LR1200GB 9.1.0u.6619_B20230130. Affected by this vulnerability is the function setUploadSetting of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument FileName leads to os command injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-249859. NOTE: The vendor was contacted early
lic and may be used. The associated identifier of this vulnerability is VDB-249859. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.249859 - https://vuldb.com/?ctiid.249859 - https://github.com/jylsec/vuldb/blob/main/TOTOLINK/LR1200GB/setUploadSetting/README.md
CVE ID: CVE-2024-0294 State: PUBLISHED Published: 2024-01-08T03:00:05.196Z Last Updated: 2025-06-17T20:39:14.963Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: Totolink Products: LR1200GB Problem Types: CWE-78 Description: A vulnerability, which was classified as critical, has been found in Totolink LR1200GB 9.1.0u.6619_B20230130. Affected by this issue is the function setUssd of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument ussd leads to os command injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-249860. NOTE: The vendor was contacted early about this dis
and may be used. The identifier of this vulnerability is VDB-249860. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.249860 - https://vuldb.com/?ctiid.249860 - https://github.com/jylsec/vuldb/blob/main/TOTOLINK/LR1200GB/setUssd/README.md
CVE ID: CVE-2024-0295 State: PUBLISHED Published: 2024-01-08T03:31:03.718Z Last Updated: 2025-06-16T18:46:38.264Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: Totolink Products: LR1200GB Problem Types: CWE-78 Description: A vulnerability, which was classified as critical, was found in Totolink LR1200GB 9.1.0u.6619_B20230130. This affects the function setWanCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument hostName leads to os command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-249861 was assigned to this vulnerability. NOTE: The vendor was contacted early about
nd may be used. The identifier VDB-249861 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.249861 - https://vuldb.com/?ctiid.249861 - https://github.com/jylsec/vuldb/blob/main/TOTOLINK/LR1200GB/setWanCfg/README.md
CVE ID: CVE-2024-0296 State: PUBLISHED Published: 2024-01-08T04:00:05.092Z Last Updated: 2025-04-17T18:11:35.742Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: Totolink Products: N200RE Problem Types: CWE-78 Description: A vulnerability has been found in Totolink N200RE 9.3.5u.6139_B20201216 and classified as critical. This vulnerability affects the function NTPSyncWithHost of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument host_time leads to os command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-249862 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early ab
ic and may be used. VDB-249862 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.249862 - https://vuldb.com/?ctiid.249862 - https://github.com/jylsec/vuldb/blob/main/TOTOLINK/N200RE/NTPSyncWithHost/README.md
CVE ID: CVE-2024-0297 State: PUBLISHED Published: 2024-01-08T04:31:03.978Z Last Updated: 2025-05-12T19:51:05.884Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: Totolink Products: N200RE Problem Types: CWE-78 Description: A vulnerability was found in Totolink N200RE 9.3.5u.6139_B20201216 and classified as critical. This issue affects the function UploadFirmwareFile of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument FileName leads to os command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-249863. NOTE: The vendor was contacted early about this
be used. The associated identifier of this vulnerability is VDB-249863. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.249863 - https://vuldb.com/?ctiid.249863 - https://github.com/jylsec/vuldb/blob/main/TOTOLINK/N200RE/UploadFirmwareFile/README.md
CVE ID: CVE-2024-0298 State: PUBLISHED Published: 2024-01-08T05:00:04.527Z Last Updated: 2025-06-03T14:38:33.507Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: Totolink Products: N200RE Problem Types: CWE-78 Description: A vulnerability was found in Totolink N200RE 9.3.5u.6139_B20201216. It has been classified as critical. Affected is the function setDiagnosisCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument ip leads to os command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-249864. NOTE: The vendor was contacted early about this disclosure
be used. The identifier of this vulnerability is VDB-249864. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.249864 - https://vuldb.com/?ctiid.249864 - https://github.com/jylsec/vuldb/blob/main/TOTOLINK/N200RE/setDiagnosisCfg/README.md