deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-41002
Published: 2023-01-26
Description: Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5[PII_REDACTED]20. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.This buffer overflow is in the function that manages the 'no icmp check link WORD destination WORD interval <1-255> retries <1-255> description (WORD|null)' command template.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120, CWE-120
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1613; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1613; https://www.talosintelligence.com/vulnerability_reports/TALOS-2022-1613
CVE: CVE-2022-41003
Published: 2023-01-26
Description: Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5[PII_REDACTED]20. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.This buffer overflow is in the function that manages the 'ip nat outside source (udp|tcp|all) (WORD|null) WORD to A.B.C.D (WORD|null) description (WORD|null)' command template.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120, CWE-120
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1613; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1613; https://www.talosintelligence.com/vulnerability_reports/TALOS-2022-1613
CVE: CVE-2022-41004
Published: 2023-01-26
Description: Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5[PII_REDACTED]20. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.This buffer overflow is in the function that manages the 'no ip nat outside source (udp|tcp|all) (WORD|null) WORD to A.B.C.D (WORD|null) description (WORD|null)' command template.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120, CWE-120
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1613; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1613; https://www.talosintelligence.com/vulnerability_reports/TALOS-2022-1613
CVE: CVE-2022-41005
Published: 2023-01-26
Description: Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5[PII_REDACTED]20. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.This buffer overflow is in the function that manages the 'ip static route destination A.B.C.D gateway A.B.C.D mask A.B.C.D metric <0-10> interface (lan|wan|vpn) description WORD' command template.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120, CWE-120
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1613; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1613; https://www.talosintelligence.com/vulnerability_reports/TALOS-2022-1613
CVE: CVE-2022-41006
Published: 2023-01-26
Description: Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5[PII_REDACTED]20. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.This buffer overflow is in the function that manages the 'no ip static route destination A.B.C.D gateway A.B.C.D mask A.B.C.D metric <0-10> interface (lan|wan|vpn) description WORD' command template.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120, CWE-120
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1613; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1613; https://www.talosintelligence.com/vulnerability_reports/TALOS-2022-1613
CVE: CVE-2022-41007
Published: 2023-01-26
Description: Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5[PII_REDACTED]20. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.This buffer overflow is in the function that manages the 'port redirect protocol (tcp|udp|tcp/udp) inport <1-65535> dstaddr A.B.C.D export <1-65535> description WORD' command template.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120, CWE-120
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1613; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1613; https://www.talosintelligence.com/vulnerability_reports/TALOS-2022-1613
CVE: CVE-2022-41008
Published: 2023-01-26
Description: Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5[PII_REDACTED]20. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.This buffer overflow is in the function that manages the 'no port redirect protocol (tcp|udp|tcp/udp) inport <1-65535> dstaddr A.B.C.D export <1-65535> description WORD' command template.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120, CWE-120
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1613; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1613; https://www.talosintelligence.com/vulnerability_reports/TALOS-2022-1613
CVE: CVE-2022-41009
Published: 2023-01-26
Description: Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5[PII_REDACTED]20. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.This buffer overflow is in the function that manages the 'port triger protocol (tcp|udp|tcp/udp) triger port <1-65535> forward port <1-65535> description WORD' command template.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120, CWE-120
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1613; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1613; https://www.talosintelligence.com/vulnerability_reports/TALOS-2022-1613
CVE: CVE-2022-41010
Published: 2023-01-26
Description: Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5[PII_REDACTED]20. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.This buffer overflow is in the function that manages the 'no port triger protocol (tcp|udp|tcp/udp) triger port <1-65535> forward port <1-65535> description WORD' command template.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120, CWE-120
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1613; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1613; https://www.talosintelligence.com/vulnerability_reports/TALOS-2022-1613
CVE: CVE-2022-41011
Published: 2023-01-26
Description: Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5[PII_REDACTED]20. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.This buffer overflow is in the function that manages the 'schedule link1 WORD link2 WORD policy (failover|backup) description (WORD|null)' command template.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120, CWE-120
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1613; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1613; https://www.talosintelligence.com/vulnerability_reports/TALOS-2022-1613
CVE: CVE-2022-41012
Published: 2023-01-26
Description: Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5[PII_REDACTED]20. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.This buffer overflow is in the function that manages the 'no schedule link1 WORD link2 WORD policy (failover|backup) description (WORD|null)' command template.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120, CWE-120
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1613; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1613; https://www.talosintelligence.com/vulnerability_reports/TALOS-2022-1613
CVE: CVE-2022-41013
Published: 2023-01-26
Description: Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5[PII_REDACTED]20. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.This buffer overflow is in the function that manages the 'static dhcp mac WORD (WORD|null) ip A.B.C.D hostname (WORD|null) description (WORD|null)' command template.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120, CWE-120
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1613; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1613; https://www.talosintelligence.com/vulnerability_reports/TALOS-2022-1613
CVE: CVE-2022-41014
Published: 2023-01-26
Description: Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5[PII_REDACTED]20. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.This buffer overflow is in the function that manages the 'no static dhcp mac WORD (WORD|null) ip A.B.C.D hostname (WORD|null) description (WORD|null)' command template.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120, CWE-120
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1613; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1613; https://www.talosintelligence.com/vulnerability_reports/TALOS-2022-1613
CVE: CVE-2022-41015
Published: 2023-01-26
Description: Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5[PII_REDACTED]20. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.This buffer overflow is in the function that manages the 'vpn basic protocol (l2tp|pptp) name WORD server WORD username WORD passsword WORD firmwall (on|off) defroute (on|off)' command template.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120, CWE-120
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1613; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1613; https://www.talosintelligence.com/vulnerability_reports/TALOS-2022-1613
CVE: CVE-2022-41016
Published: 2023-01-26
Description: Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5[PII_REDACTED]20. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.This buffer overflow is in the function that manages the 'no vpn basic protocol (l2tp|pptp) name WORD server WORD username WORD passsword WORD firmwall (on|off) defroute (on|off)' command template.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120, CWE-120
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1613; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1613; https://www.talosintelligence.com/vulnerability_reports/TALOS-2022-1613
CVE: CVE-2022-41017
Published: 2023-01-26
Description: Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5[PII_REDACTED]20. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.This buffer overflow is in the function that manages the 'vpn basic protocol (l2tp|pptp) name WORD server WORD username WORD passsword WORD firmwall (on|off) defroute (on|off) localip A.B.C.D' command template.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120, CWE-120
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1613; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1613; https://www.talosintelligence.com/vulnerability_reports/TALOS-2022-1613
CVE: CVE-2022-41018
Published: 2023-01-26
Description: Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5[PII_REDACTED]20. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.This buffer overflow is in the function that manages the 'no vpn basic protocol (l2tp|pptp) name WORD server WORD username WORD passsword WORD firmwall (on|off) defroute (on|off) localip A.B.C.D' command template.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120, CWE-120
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1613; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1613; https://www.talosintelligence.com/vulnerability_reports/TALOS-2022-1613
CVE: CVE-2022-41019
Published: 2023-01-26
Description: Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5[PII_REDACTED]20. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.This buffer overflow is in the function that manages the 'vpn l2tp advanced name WORD dns (yes|no) mtu <128-16384> mru <128-16384> auth (on|off) password (WORD|null)' command template.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120, CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1613; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1613; https://www.talosintelligence.com/vulnerability_reports/TALOS-2022-1613
CVE: CVE-2022-41020
Published: 2023-01-26
Description: Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5[PII_REDACTED]20. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.This buffer overflow is in the function that manages the 'no vpn l2tp advanced name WORD dns (yes|no) mtu <128-16384> mru <128-16384> auth (on|off) password (WORD|null)' command template.
CVSS Score: 7.2 (HIGH)
CWE: CWE-120, CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1613; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1613; https://www.talosintelligence.com/vulnerability_reports/TALOS-2022-1613
CVE: CVE-2022-41021
Published: 2023-01-26
Description: Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5[PII_REDACTED]20. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.This buffer overflow is in the function that manages the 'vpn l2tp advanced name WORD dns (yes|no) mtu <128-16384> mru <128-16384> auth (on|off) password (WORD|null) options WORD' command template.
CVSS Score: 7.2 (HIGH)
CWE: CWE-120, CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1613; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1613; https://www.talosintelligence.com/vulnerability_reports/TALOS-2022-1613
CVE: CVE-2022-41022
Published: 2023-01-26
Description: Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5[PII_REDACTED]20. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.This buffer overflow is in the function that manages the 'no vpn l2tp advanced name WORD dns (yes|no) mtu <128-16384> mru <128-16384> auth (on|off) password (WORD|null) options WORD' command template.
CVSS Score: 7.2 (HIGH)
CWE: CWE-120, CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1613; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1613; https://www.talosintelligence.com/vulnerability_reports/TALOS-2022-1613
CVE: CVE-2022-41023
Published: 2023-01-26
Description: Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5[PII_REDACTED]20. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.This buffer overflow is in the function that manages the 'vpn pptp advanced name WORD dns (yes|no) mtu <128-16384> mru <128-16384> mppe (on|off) stateful (on|off)' command template.
CVSS Score: 7.2 (HIGH)
CWE: CWE-120, CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1613; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1613; https://www.talosintelligence.com/vulnerability_reports/TALOS-2022-1613
CVE: CVE-2022-41024
Published: 2023-01-26
Description: Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5[PII_REDACTED]20. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.This buffer overflow is in the function that manages the 'no vpn pptp advanced name WORD dns (yes|no) mtu <128-16384> mru <128-16384> mppe (on|off) stateful (on|off)' command template.
CVSS Score: 7.2 (HIGH)
CWE: CWE-120, CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1613; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1613; https://www.talosintelligence.com/vulnerability_reports/TALOS-2022-1613
CVE: CVE-2022-41025
Published: 2023-01-26
Description: Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5[PII_REDACTED]20. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.This buffer overflow is in the function that manages the 'vpn pptp advanced name WORD dns (yes|no) mtu <128-16384> mru <128-16384> mppe (on|off) stateful (on|off) options WORD' command template.
CVSS Score: 7.2 (HIGH)
CWE: CWE-120, CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1613; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1613; https://www.talosintelligence.com/vulnerability_reports/TALOS-2022-1613
CVE: CVE-2022-41026
Published: 2023-01-26
Description: Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5[PII_REDACTED]20. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.This buffer overflow is in the function that manages the 'no vpn pptp advanced name WORD dns (yes|no) mtu <128-16384> mru <128-16384> mppe (on|off) stateful (on|off) options WORD' command template.
CVSS Score: 7.2 (HIGH)
CWE: CWE-120, CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1613; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1613; https://www.talosintelligence.com/vulnerability_reports/TALOS-2022-1613
CVE: CVE-2022-41027
Published: 2023-01-26
Description: Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5[PII_REDACTED]20. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.This buffer overflow is in the function that manages the 'vpn schedule name1 WORD name2 WORD policy (failover|backup) description (WORD|null)' command template.
CVSS Score: 7.2 (HIGH)
CWE: CWE-120, CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1613; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1613; https://www.talosintelligence.com/vulnerability_reports/TALOS-2022-1613
CVE: CVE-2022-41028
Published: 2023-01-26
Description: Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5[PII_REDACTED]20. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.This buffer overflow is in the function that manages the 'no vpn schedule name1 WORD name2 WORD policy (failover|backup) description (WORD|null)' command template.
CVSS Score: 7.2 (HIGH)
CWE: CWE-120, CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1613; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1613; https://www.talosintelligence.com/vulnerability_reports/TALOS-2022-1613
CVE: CVE-2022-41029
Published: 2023-01-26
Description: Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5[PII_REDACTED]20. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.This buffer overflow is in the function that manages the 'wlan filter mac address WORD descript WORD' command template.
CVSS Score: 7.2 (HIGH)
CWE: CWE-120, CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1613; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1613; https://www.talosintelligence.com/vulnerability_reports/TALOS-2022-1613
CVE: CVE-2022-41030
Published: 2023-01-26
Description: Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5[PII_REDACTED]20. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.This buffer overflow is in the function that manages the 'no wlan filter mac address WORD descript WORD' command template.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120, CWE-120
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1613; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1613; https://www.talosintelligence.com/vulnerability_reports/TALOS-2022-1613
CVE: CVE-2022-41154
Published: 2023-01-26
Description: A directory traversal vulnerability exists in the m2m DELETE_FILE cmd functionality of Siretta QUARTZ-GOLD G5.0.1.5[PII_REDACTED]20. A specially-crafted network packet can lead to arbitrary file deletion. An attacker can send a network request to trigger this vulnerability.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22, CWE-22
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1637; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1637; https://www.talosintelligence.com/vulnerability_reports/TALOS-2022-1637