Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
he vendor has stated that with the introduction of firmware version 1.49.16 (Jan 2023) the FLIR AX8 should no longer be affected by the vulnerability reported. Latest firmware version (as of Oct 2025, was released Jun 2024) is 1.55.16. Additional Analyst Notes: - CVE Program Container: References: - https://www.flir.com/products/ax8-automation/ - https://gist.github.com/Nwqda/9e16852ab7827dc62b8e44d6180a6899 - http://packetstormsecurity.com/files/168114/FLIX-AX8-1.46.16-Remote-Command-Execution.html - http://packetstormsecurity.com/files/168116/FLIR-AX8-1.46.16-Traversal-Access-Control-Command-Injection-XSS.html - http://packetstormsecurity.com/files/169701/FLIR-AX8-1.46.16-Remote-Command-In
cess-Control-Command-Injection-XSS.html - http://packetstormsecurity.com/files/169701/FLIR-AX8-1.46.16-Remote-Command-Injection.html - https://www.zeroscience.mk/en/vulnerabilities/ZSL-2018-5491.php - https://github.com/WlX-33/PoC-for-CVE/blob/main/CVE-2022-36266/FLIR%20AX8%20Unauthenticated%20OS%20Command%20Injection.py
CVE ID: CVE-2022-37062 State: PUBLISHED Published: 2022-08-18T17:05:48.000Z Last Updated: 2025-10-17T19:17:22.903Z Vendors: n/a Products: n/a Problem Types: n/a Description: All FLIR AX8 thermal sensor cameras version up to and including 1.46.16 are affected by an insecure design vulnerability due to an improper directory access restriction. An unauthenticated, remote attacker can exploit this by sending a URI that contains the path of the SQLite users database and download it. A successful exploit could allow the attacker to extract usernames and hashed passwords. NOTE: The vendor has stated that with the introduction of firmware version 1.49.16 (Jan 2023) the FLIR AX8 should no longer be a
e vendor has stated that with the introduction of firmware version 1.49.16 (Jan 2023) the FLIR AX8 should no longer be affected by the vulnerability reported. Latest firmware version (as of Oct 2025, was released Jun 2024) is 1.55.16. Additional Analyst Notes: - CVE Program Container: References: - https://www.flir.com/products/ax8-automation/ - https://gist.github.com/Nwqda/9e16852ab7827dc62b8e44d6180a6899 - http://packetstormsecurity.com/files/168116/FLIR-AX8-1.46.16-Traversal-Access-Control-Command-Injection-XSS.html
CVE ID: CVE-2022-37063 State: PUBLISHED Published: 2022-08-18T17:09:51.000Z Last Updated: 2025-10-17T19:16:03.999Z Vendors: n/a Products: n/a Problem Types: n/a Description: All FLIR AX8 thermal sensor cameras versions up to and including 1.46.16 are vulnerable to Cross Site Scripting (XSS) due to improper input sanitization. An authenticated remote attacker can execute arbitrary JavaScript code in the web management interface. A successful exploit could allow the attacker to insert malicious JavaScript code. NOTE: The vendor has stated that with the introduction of firmware version 1.49.16 (Jan 2023) the FLIR AX8 should no longer be affected by the vulnerability reported. Latest firmware ve
e version 1.49.16 (Jan 2023) the FLIR AX8 should no longer be affected by the vulnerability reported. Latest firmware version (as of Oct 2025, was released Jun 2024) is 1.55.16. Additional Analyst Notes: - CVE Program Container: References: - https://www.flir.com/products/ax8-automation/ - https://gist.github.com/Nwqda/9e16852ab7827dc62b8e44d6180a6899 - http://packetstormsecurity.com/files/168116/FLIR-AX8-1.46.16-Traversal-Access-Control-Command-Injection-XSS.html
CVE ID: CVE-2022-37066 State: PUBLISHED Published: 2022-08-25T13:59:57 Last Updated: 2024-08-03T10:21:32.840Z Vendors: n/a Products: n/a Problem Types: n/a Description: H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function UpdateDDNS. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Darry-lang1/vuln/tree/main/H3C/GR-1200W/15
CVE ID: CVE-2022-37067 State: PUBLISHED Published: 2022-08-25T13:59:57 Last Updated: 2024-08-03T10:21:32.840Z Vendors: n/a Products: n/a Problem Types: n/a Description: H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function UpdateWanParamsMulti. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Darry-lang1/vuln/tree/main/H3C/GR-1200W/17
CVE ID: CVE-2022-37068 State: PUBLISHED Published: 2022-08-25T13:59:58 Last Updated: 2024-08-03T10:21:32.807Z Vendors: n/a Products: n/a Problem Types: n/a Description: H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function UpdateMacCloneFinal. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Darry-lang1/vuln/tree/main/H3C/GR-1200W/14
CVE ID: CVE-2022-37069 State: PUBLISHED Published: 2022-08-25T13:59:59 Last Updated: 2024-08-03T10:21:32.868Z Vendors: n/a Products: n/a Problem Types: n/a Description: H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function UpdateSnat. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Darry-lang1/vuln/tree/main/H3C/GR-1200W/12
CVE ID: CVE-2022-37070 State: PUBLISHED Published: 2022-08-25T14:00:00 Last Updated: 2024-08-03T10:21:32.856Z Vendors: n/a Products: n/a Problem Types: n/a Description: H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a command injection vulnerability via the param parameter at DelL2tpLNSList. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Darry-lang1/vuln/tree/main/H3C/GR-1200W/19
CVE ID: CVE-2022-37071 State: PUBLISHED Published: 2022-08-25T14:00:18 Last Updated: 2024-08-03T10:21:32.813Z Vendors: n/a Products: n/a Problem Types: n/a Description: H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function UpdateOne2One. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Darry-lang1/vuln/tree/main/H3C/GR-1200W/18
CVE ID: CVE-2022-37072 State: PUBLISHED Published: 2022-08-25T14:00:23 Last Updated: 2024-08-03T10:21:32.857Z Vendors: n/a Products: n/a Problem Types: n/a Description: H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function UpdateWanLinkspyMulti. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Darry-lang1/vuln/tree/main/H3C/GR-1200W/16
CVE ID: CVE-2022-37073 State: PUBLISHED Published: 2022-08-25T14:00:18 Last Updated: 2024-08-03T10:21:32.845Z Vendors: n/a Products: n/a Problem Types: n/a Description: H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function UpdateWanModeMulti. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Darry-lang1/vuln/tree/main/H3C/GR-1200W/13
CVE ID: CVE-2022-37074 State: PUBLISHED Published: 2022-08-25T14:00:28 Last Updated: 2024-08-03T10:21:32.782Z Vendors: n/a Products: n/a Problem Types: n/a Description: H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function switch_debug_info_set. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Darry-lang1/vuln/tree/main/H3C/GR-1200W/11
CVE ID: CVE-2022-37075 State: PUBLISHED Published: 2022-08-25T14:00:23 Last Updated: 2024-08-03T10:21:32.838Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLink A7000R V9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the ip parameter in the function setDiagnosisCfg. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Darry-lang1/vuln/tree/main/TOTOLINK/A7000R/7
CVE ID: CVE-2022-37076 State: PUBLISHED Published: 2022-08-25T14:00:28 Last Updated: 2024-08-03T10:21:32.772Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a command injection vulnerability via the FileName parameter in the function UploadFirmwareFile. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Darry-lang1/vuln/tree/main/TOTOLINK/A7000R/4
CVE ID: CVE-2022-37077 State: PUBLISHED Published: 2022-08-25T14:03:38 Last Updated: 2024-08-03T10:21:32.794Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the pppoeUser parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Darry-lang1/vuln/tree/main/TOTOLINK/A7000R/9
CVE ID: CVE-2022-37078 State: PUBLISHED Published: 2022-08-25T14:03:39 Last Updated: 2024-08-03T10:21:32.853Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a command injection vulnerability via the lang parameter at /setting/setLanguageCfg. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Darry-lang1/vuln/tree/main/TOTOLINK/A7000R/6
CVE ID: CVE-2022-37079 State: PUBLISHED Published: 2022-08-25T14:03:40 Last Updated: 2024-08-03T10:21:32.902Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a command injection vulnerability via the hostName parameter in the function setOpModeCfg. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Darry-lang1/vuln/tree/main/TOTOLINK/A7000R/5
CVE ID: CVE-2022-37080 State: PUBLISHED Published: 2022-08-25T14:03:41 Last Updated: 2024-08-03T10:21:32.897Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the command parameter at setting/setTracerouteCfg. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Darry-lang1/vuln/tree/main/TOTOLINK/A7000R/8
CVE ID: CVE-2022-37081 State: PUBLISHED Published: 2022-08-25T14:03:41 Last Updated: 2024-08-03T10:21:32.811Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a command injection vulnerability via the command parameter at setting/setTracerouteCfg. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Darry-lang1/vuln/tree/main/TOTOLINK/A7000R/2
CVE ID: CVE-2022-37082 State: PUBLISHED Published: 2022-08-25T14:03:42 Last Updated: 2024-08-03T10:21:32.800Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a command injection vulnerability via the host_time parameter at the function NTPSyncWithHost. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Darry-lang1/vuln/tree/main/TOTOLINK/A7000R/3
CVE ID: CVE-2022-37083 State: PUBLISHED Published: 2022-08-25T14:03:43 Last Updated: 2024-08-03T10:21:32.885Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a command injection vulnerability via the ip parameter at the function setDiagnosisCfg. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Darry-lang1/vuln/tree/main/TOTOLINK/A7000R/1
CVE ID: CVE-2022-37084 State: PUBLISHED Published: 2022-08-25T14:03:44 Last Updated: 2024-08-03T10:21:32.834Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the sPort parameter at the addEffect function. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Darry-lang1/vuln/tree/main/TOTOLINK/A7000R/10
CVE ID: CVE-2022-37085 State: PUBLISHED Published: 2022-08-25T14:03:54 Last Updated: 2024-08-03T10:21:32.871Z Vendors: n/a Products: n/a Problem Types: n/a Description: H3C H200 H200V100R004 was discovered to contain a stack overflow via the AddWlanMacList function. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Darry-lang1/vuln/tree/main/H3C/H200/9
CVE ID: CVE-2022-37086 State: PUBLISHED Published: 2022-08-25T14:03:54 Last Updated: 2024-08-03T10:21:32.861Z Vendors: n/a Products: n/a Problem Types: n/a Description: H3C H200 H200V100R004 was discovered to contain a stack overflow via the function Asp_SetTimingtimeWifiAndLed. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Darry-lang1/vuln/tree/main/H3C/H200/3
CVE ID: CVE-2022-37087 State: PUBLISHED Published: 2022-08-25T14:03:58 Last Updated: 2024-08-03T10:21:32.903Z Vendors: n/a Products: n/a Problem Types: n/a Description: H3C H200 H200V100R004 was discovered to contain a stack overflow via the function SetMobileAPInfoById. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Darry-lang1/vuln/tree/main/H3C/H200/6
CVE ID: CVE-2022-37088 State: PUBLISHED Published: 2022-08-25T14:03:59 Last Updated: 2024-08-03T10:21:32.813Z Vendors: n/a Products: n/a Problem Types: n/a Description: H3C H200 H200V100R004 was discovered to contain a stack overflow via the function SetAP5GWifiById. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Darry-lang1/vuln/tree/main/H3C/H200/4
CVE ID: CVE-2022-37089 State: PUBLISHED Published: 2022-08-25T14:03:58 Last Updated: 2024-08-03T10:21:32.884Z Vendors: n/a Products: n/a Problem Types: n/a Description: H3C H200 H200V100R004 was discovered to contain a stack overflow via the function EditMacList. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Darry-lang1/vuln/tree/main/H3C/H200/2
CVE ID: CVE-2022-37090 State: PUBLISHED Published: 2022-08-25T14:04:02 Last Updated: 2024-08-03T10:21:32.824Z Vendors: n/a Products: n/a Problem Types: n/a Description: H3C H200 H200V100R004 was discovered to contain a stack overflow via the function Edit_BasicSSID. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Darry-lang1/vuln/tree/main/H3C/H200/8
CVE ID: CVE-2022-37091 State: PUBLISHED Published: 2022-08-25T14:04:02 Last Updated: 2024-08-03T10:21:32.902Z Vendors: n/a Products: n/a Problem Types: n/a Description: H3C H200 H200V100R004 was discovered to contain a stack overflow via the function EditWlanMacList. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Darry-lang1/vuln/tree/main/H3C/H200/10
CVE ID: CVE-2022-37092 State: PUBLISHED Published: 2022-08-25T14:04:05 Last Updated: 2024-08-03T10:21:32.840Z Vendors: n/a Products: n/a Problem Types: n/a Description: H3C H200 H200V100R004 was discovered to contain a stack overflow via the function SetAPWifiorLedInfoById. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Darry-lang1/vuln/tree/main/H3C/H200/5
CVE ID: CVE-2022-37093 State: PUBLISHED Published: 2022-08-25T14:04:12 Last Updated: 2024-08-03T10:21:32.853Z Vendors: n/a Products: n/a Problem Types: n/a Description: H3C H200 H200V100R004 was discovered to contain a stack overflow via the function AddMacList. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Darry-lang1/vuln/tree/main/H3C/H200/1
CVE ID: CVE-2022-37094 State: PUBLISHED Published: 2022-08-25T14:04:12 Last Updated: 2024-08-03T10:21:32.817Z Vendors: n/a Products: n/a Problem Types: n/a Description: H3C H200 H200V100R004 was discovered to contain a stack overflow via the function Edit_BasicSSID_5G. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Darry-lang1/vuln/tree/main/H3C/H200/7
CVE ID: CVE-2022-37095 State: PUBLISHED Published: 2022-08-25T14:04:16 Last Updated: 2024-08-03T10:21:33.183Z Vendors: n/a Products: n/a Problem Types: n/a Description: H3C H200 H200V100R004 was discovered to contain a stack overflow via the function UpdateWanParams. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Darry-lang1/vuln/tree/main/H3C/H200/16
CVE ID: CVE-2022-37096 State: PUBLISHED Published: 2022-08-25T14:04:16 Last Updated: 2024-08-03T10:21:33.244Z Vendors: n/a Products: n/a Problem Types: n/a Description: H3C H200 H200V100R004 was discovered to contain a stack overflow via the function EnableIpv6. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Darry-lang1/vuln/tree/main/H3C/H200/11
CVE ID: CVE-2022-37097 State: PUBLISHED Published: 2022-08-25T14:04:16 Last Updated: 2024-08-03T10:21:33.125Z Vendors: n/a Products: n/a Problem Types: n/a Description: H3C H200 H200V100R004 was discovered to contain a stack overflow via the function SetAPInfoById. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Darry-lang1/vuln/tree/main/H3C/H200/13
CVE ID: CVE-2022-37098 State: PUBLISHED Published: 2022-08-25T14:04:19 Last Updated: 2024-08-03T10:21:33.205Z Vendors: n/a Products: n/a Problem Types: n/a Description: H3C H200 H200V100R004 was discovered to contain a stack overflow via the function UpdateIpv6Params. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Darry-lang1/vuln/tree/main/H3C/H200/12
CVE ID: CVE-2022-37099 State: PUBLISHED Published: 2022-08-25T14:04:16 Last Updated: 2024-08-03T10:21:33.236Z Vendors: n/a Products: n/a Problem Types: n/a Description: H3C H200 H200V100R004 was discovered to contain a stack overflow via the function UpdateSnat. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Darry-lang1/vuln/tree/main/H3C/H200/14
CVE ID: CVE-2022-37100 State: PUBLISHED Published: 2022-08-25T14:04:23 Last Updated: 2024-08-03T10:21:33.170Z Vendors: n/a Products: n/a Problem Types: n/a Description: H3C H200 H200V100R004 was discovered to contain a stack overflow via the function UpdateMacClone. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Darry-lang1/vuln/tree/main/H3C/H200/15
CVE ID: CVE-2022-37108 State: PUBLISHED Published: 2022-09-07T13:06:27 Last Updated: 2024-08-03T10:21:33.157Z Severity: HIGH (CVSS 8.7 CVSS:3.1/AC:L/AV:N/A:H/C:N/I:H/PR:H/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An injection vulnerability in the syslog-ng configuration wizard in Securonix Snypr 6.4 allows an application user with the "Manage Ingesters" permission to execute arbitrary code on remote ingesters by appending arbitrary text to text files that are executed by the system, such as users' crontab files. The patch for this was present in SNYPR version 6.4 Jun 2022 R3_[06170871], but may have been introduced sooner. Additional Analyst Notes: - CVE Program Co
NYPR version 6.4 Jun 2022 R3_[06170871], but may have been introduced sooner. Additional Analyst Notes: - CVE Program Container: References: - https://conway.scot/securonix-rce/
CVE ID: CVE-2022-37109 State: PUBLISHED Published: 2022-11-14T00:00:00.000Z Last Updated: 2025-05-01T18:58:20.657Z Vendors: n/a Products: n/a Problem Types: n/a Description: patrickfuller camp up to and including commit bbd53a256ed70e79bd8758080936afbf6d738767 is vulnerable to Incorrect Access Control. Access to the password.txt file is not properly restricted as it is in the root directory served by StaticFileHandler and the Tornado rule to throw a 403 error when password.txt is accessed can be bypassed. Furthermore, it is not necessary to crack the password hash to authenticate with the application because the password hash is also used as the cookie secret, so an attacker can generate his
ticate with the application because the password hash is also used as the cookie secret, so an attacker can generate his own authentication cookie. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/patrickfuller/camp/commit/bf6af5c2e5cf713e4050c11c52dd4c55e89880b1 - https://medium.com/%40elias.hohl/authentication-bypass-vulnerability-in-camp-a-raspberry-pi-camera-server-477e5d270904 - https://github.com/ehtec/camp-exploit - http://packetstormsecurity.com/files/171478/Raspberry-Pi-Camera-Server-1.0-Authentication-Bypass.html
CVE ID: CVE-2022-37111 State: PUBLISHED Published: 2022-08-23T15:20:56 Last Updated: 2024-08-03T10:21:33.244Z Vendors: n/a Products: n/a Problem Types: n/a Description: BlueCMS 1.6 has SQL injection in line 132 of admin/article.php Additional Analyst Notes: - CVE Program Container: References: - https://github.com/seizer-zyx/Vulnerability/issues/1
CVE ID: CVE-2022-37112 State: PUBLISHED Published: 2022-08-23T15:19:00 Last Updated: 2024-08-03T10:21:33.150Z Vendors: n/a Products: n/a Problem Types: n/a Description: BlueCMS 1.6 has SQL injection in line 55 of admin/model.php Additional Analyst Notes: - CVE Program Container: References: - https://github.com/seizer-zyx/Vulnerability/issues/2
CVE ID: CVE-2022-37113 State: PUBLISHED Published: 2022-08-23T15:17:18 Last Updated: 2024-08-03T10:21:33.227Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bluecms 1.6 has SQL injection in line 132 of admin/area.php Additional Analyst Notes: - CVE Program Container: References: - https://github.com/seizer-zyx/Vulnerability/issues/3
CVE ID: CVE-2022-37122 State: PUBLISHED Published: 2022-08-31T15:47:57 Last Updated: 2024-08-03T10:21:33.235Z Vendors: n/a Products: n/a Problem Types: n/a Description: Carel pCOWeb HVAC BACnet Gateway 2.1.0, Firmware: A2.1.0 - B2.1.0, Application Software: 2.15.4A Software v16 13020200 suffers from an unauthenticated arbitrary file disclosure vulnerability. Input passed through the 'file' GET parameter through the 'logdownload.cgi' Bash script is not properly verified before being used to download log files. This can be exploited to disclose the contents of arbitrary and sensitive files via directory traversal attacks. Additional Analyst Notes: - CVE Program Container: References: - https:/
ensitive files via directory traversal attacks. Additional Analyst Notes: - CVE Program Container: References: - https://www.zeroscience.mk/en/vulnerabilities/ZSL-2022-5709.php - https://www.zeroscience.mk/codes/carelpco_dir.txt - https://packetstormsecurity.com/files/167684/
CVE ID: CVE-2022-37123 State: PUBLISHED Published: 2022-08-31T22:59:58 Last Updated: 2024-08-03T10:21:33.252Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-link DIR-816 A2_v1.10CNB04.img is vulnerable to Command injection via /goform/form2userconfig.cgi. Additional Analyst Notes: - CVE Program Container: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/z1r00/IOT_Vul/blob/main/dlink/Dir816/form2userconfig_cgi/readme.md
CVE ID: CVE-2022-37125 State: PUBLISHED Published: 2022-08-31T21:42:30 Last Updated: 2024-08-03T10:21:33.277Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-link DIR-816 A2_v1.10CNB04.img is vulnerable to Command injection via /goform/NTPSyncWithHost. Additional Analyst Notes: - CVE Program Container: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/z1r00/IOT_Vul/tree/main/dlink/Dir816/form2systime_cgi
CVE ID: CVE-2022-37128 State: PUBLISHED Published: 2022-08-31T18:54:22 Last Updated: 2024-08-03T10:21:33.239Z Vendors: n/a Products: n/a Problem Types: n/a Description: In D-Link DIR-816 A2_v1.10CNB04.img the network can be initialized without authentication via /goform/wizard_end. Additional Analyst Notes: - CVE Program Container: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/z1r00/IOT_Vul/blob/main/dlink/Dir816/wizard_end/readme.md
CVE ID: CVE-2022-37129 State: PUBLISHED Published: 2022-08-31T22:44:57 Last Updated: 2024-08-03T10:21:33.256Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-816 A2_v1.10CNB04.img is vulnerable to Command Injection via /goform/SystemCommand. After the user passes in the command parameter, it will be spliced into byte_4836B0 by snprintf, and finally doSystem(&byte_4836B0); will be executed, resulting in a command injection. Additional Analyst Notes: - CVE Program Container: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/z1r00/IOT_Vul/blob/main/dlink/Dir816/SystemCommand/readme.md