deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-31023
Published: 2022-06-02
Description: Play Framework is a web framework for Java and Scala. Verions prior to 2.8.16 are vulnerable to generation of error messages containing sensitive information. Play Framework, when run in dev mode, shows verbose errors for easy debugging, including an exception stack trace. Play does this by configuring its `DefaultHttpErrorHandler` to do so based on the application mode. In its Scala API Play also provides a static object `DefaultHttpErrorHandler` that is configured to always show verbose errors. This is used as a default value in some Play APIs, so it is possible to inadvertently use this version in production. It is also possible to improperly configure the `DefaultHttpErrorHandler` object instance as the injected error handler. Both of these situations could result in verbose errors displaying to users in a production application, which could expose sensitive information from the application. In particular, the constructor for `CORSFilter` and `apply` method for `CORSActionBuilder` use the static object `DefaultHttpErrorHandler` as a default value. This is patched in Play Framework 2.8.16. The `DefaultHttpErrorHandler` object has been changed to use the prod-mode behavior, and `DevHttpErrorHandler` has been introduced for the dev-mode behavior. A workaround is available. When constructing a `CORSFilter` or `CORSActionBuilder`, ensure that a properly-configured error handler is passed. Generally this should be done by using the `HttpErrorHandler` instance provided through dependency injection or through Play's `BuiltInComponents`. Ensure that the application is not using the `DefaultHttpErrorHandler` static object in any code that may be run in production.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-209
References: https://github.com/playframework/playframework/pull/11305; https://github.com/playframework/playframework/releases/tag/2.8.16; https://github.com/playframework/playframework/security/advisories/GHSA-p9p4-97g9-wcrh
CVE: CVE-2022-32019
Published: 2022-06-02
Description: Car Rental Management System v1.0 is vulnerable to Arbitrary code execution via car-rental-management-system/admin/ajax.php?action=save_car.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://github.com/k0xx11/bug_report/blob/main/vendors/campcodes.com/car-rental-management-system/RCE-1.md; https://github.com/k0xx11/bug_report/blob/main/vendors/campcodes.com/car-rental-management-system/RCE-1.md
CVE: CVE-2021-42875
Published: 2022-06-02
Description: TOTOLINK EX1200T V4.1.2cu.5215 contains a remote command injection vulnerability in the function setDiagnosisCfg of the file lib/cste_modules/system.so to control the ipDoamin.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: http://ex1200t.com; http://totolink.net; https://github.com/p1Kk/vuln/blob/main/totolink_ex1200t_ipdoamin_rce.md
CVE: CVE-2022-31024
Published: 2022-06-02
Description: richdocuments is the repository for NextCloud Collabra, the app for Nextcloud Office collaboration. Prior to versions 6.0.0, 5.0.4, and 4.2.6, a user could be tricked into working against a remote Office by sending them a federated share. richdocuments versions 6.0.0, 5.0.4 and 4.2.6 contain a fix for this issue. There are currently no known workarounds available.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-284, CWE-346
References: https://github.com/nextcloud/richdocuments/pull/2161; https://github.com/nextcloud/security-advisories/security/advisories/GHSA-94hr-7g4v-f53r; https://hackerone.com/reports/1210424
CVE: CVE-2021-33473
Published: 2022-06-02
Description: An argument injection vulnerability in Dragonfly Ruby Gem v1.3.0 allows attackers to read and write arbitrary files when the verify_url option is disabled. This vulnerability is exploited via a crafted URL.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-88
References: https://github.com/markevans/dragonfly/commit/25399297bb457f7fcf8e3f91e85945b255b111b5; https://github.com/markevans/dragonfly/issues/513; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2021-42877
Published: 2022-06-02
Description: TOTOLINK EX1200T V4.1.2cu.5215 contains a denial of service vulnerability in function RebootSystem of the file lib/cste_modules/system which can reboot the system.
CVSS Score: 7.5 (HIGH)
References: http://ex1200t.com; http://totolink.net/; https://github.com/p1Kk/vuln/blob/main/totolink_ex1200t_reboot.md
CVE: CVE-2022-22556
Published: 2022-06-02
Description: Dell PowerStore contains an Uncontrolled Resource Consumption Vulnerability in PowerStore User Interface. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to the Denial of Service.
CVSS Score: 3.7 (LOW)
CWE: CWE-400, CWE-400
References: https://www.dell.com/support/kbdoc/000196367; https://www.dell.com/support/kbdoc/000196367
CVE: CVE-2022-22557
Published: 2022-06-02
Description: PowerStore contains Plain-Text Password Storage Vulnerability in PowerStore X & T environments running versions 2.0.0.x and 2.0.1.x A locally authenticated attacker could potentially exploit this vulnerability, leading to the disclosure of certain user credentials. The attacker may be able to use the exposed credentials to access the vulnerable application with privileges of the compromised account.
CVSS Score: 7.5 (HIGH)
CWE: CWE-256, CWE-522
References: https://www.dell.com/support/kbdoc/000196367; https://www.dell.com/support/kbdoc/000196367
CVE: CVE-2022-26866
Published: 2022-06-02
Description: Dell PowerStore Versions before v2.1.1.0. contains a Stored Cross-Site Scripting vulnerability. A high privileged network attacker could potentially exploit this vulnerability, leading to the storage of malicious HTML or JavaScript codes in a trusted application data store. When a victim user accesses the data store through their browsers, the malicious code gets executed by the web browser in the context of the vulnerable web application. Exploitation may lead to information disclosure, session theft, or client-side request forgery.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.dell.com/support/kbdoc/000196367; https://www.dell.com/support/kbdoc/000196367
CVE: CVE-2022-26867
Published: 2022-06-02
Description: PowerStore SW v2.1.1.0 supports the option to export data to either a CSV or an XLSX file. The data is taken as is, without any validation or sanitization. It allows a malicious, authenticated user to inject payloads that might get interpreted as formulas by the corresponding spreadsheet application that is being used to open the CSV/XLSX file.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-1236, CWE-1236
References: https://www.dell.com/support/kbdoc/000196367; https://www.dell.com/support/kbdoc/000196367
CVE: CVE-2022-26868
Published: 2022-06-02
Description: Dell EMC PowerStore versions 2.0.0.x, 2.0.1.x, and 2.1.0.x are vulnerable to a command injection flaw. An authenticated attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the application's underlying OS, with the privileges of the vulnerable application. Exploitation may lead to a system takeover by an attacker.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-78, CWE-78
References: https://www.dell.com/support/kbdoc/000196367; https://www.dell.com/support/kbdoc/000196367
CVE: CVE-2022-26869
Published: 2022-06-02
Description: Dell PowerStore versions 2.0.0.x, 2.0.1.x and 2.1.0.x contains an open port vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to information disclosure and arbitrary code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-200, CWE-668
References: https://www.dell.com/support/kbdoc/000196367; https://www.dell.com/support/kbdoc/000196367
CVE: CVE-2022-29084
Published: 2022-06-02
Description: Dell Unity, Dell UnityVSA, and Dell Unity XT versions before 5.2.0.0.5.173 do not restrict excessive authentication attempts in Unisphere GUI. A remote unauthenticated attacker may potentially exploit this vulnerability to brute-force passwords and gain access to the system as the victim. Account takeover is possible if weak passwords are used by users.
CVSS Score: 8.1 (HIGH)
CWE: CWE-307, CWE-307
References: https://www.dell.com/support/kbdoc/000199050; https://www.dell.com/support/kbdoc/000199050
CVE: CVE-2022-29085
Published: 2022-06-02
Description: Dell Unity, Dell UnityVSA, and Dell Unity XT versions prior to 5.2.0.0.5.173 contain a plain-text password storage vulnerability when certain off-array tools are run on the system. The credentials of a user with high privileges are stored in plain text. A local malicious user with high privileges may use the exposed password to gain access with the privileges of the compromised user.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-256, CWE-522
References: https://www.dell.com/support/kbdoc/000199050; https://www.dell.com/support/kbdoc/000199050
CVE: CVE-2022-29718
Published: 2022-06-02
Description: Caddy v2.4 was discovered to contain an open redirect vulnerability. A remote unauthenticated attacker may exploit this vulnerability to redirect users to arbitrary web URLs by tricking the victim users to click on crafted links.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://github.com/caddyserver/caddy/pull/4499; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CP2VIUT5IKA3OKM6YWA5LTLJ2GTEIH7C/; https://github.com/caddyserver/caddy/pull/4499
CVE: CVE-2022-32250
Published: 2022-06-02
Description: net/netfilter/nf_tables_api.c in the Linux kernel through 5.18.1 allows a local user (able to create user/net namespaces) to escalate privileges to root because an incorrect NFT_STATEFUL_EXPR check leads to a use-after-free.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: http://www.openwall.com/lists/oss-security/2022/06/03/1; http://www.openwall.com/lists/oss-security/2022/06/04/1; http://www.openwall.com/lists/oss-security/2022/06/20/1
CVE: CVE-2022-31459
Published: 2022-06-02
Description: Owl Labs Meeting Owl 5.2.0.15 allows attackers to retrieve the passcode hash via a certain c 10 value over Bluetooth.
CVSS Score: 7.4 (HIGH)
CWE: CWE-326
References: https://arstechnica.com/information-technology/2022/06/vulnerabilities-in-meeting-owl-videoconference-device-imperil-100k-users/; https://resources.owllabs.com/blog/owl-labs-update; https://www.modzero.com/static/meetingowl/Meeting_Owl_Pro_Security_Disclosure_Report_RELEASE.pdf
CVE: CVE-2022-31460
Published: 2022-06-02
Description: Owl Labs Meeting Owl 5.2.0.15 allows attackers to activate Tethering Mode with hard-coded hoothoot credentials via a certain c 150 value.
CVSS Score: 7.4 (HIGH)
CWE: CWE-798
References: https://arstechnica.com/information-technology/2022/06/vulnerabilities-in-meeting-owl-videoconference-device-imperil-100k-users/; https://resources.owllabs.com/blog/owl-labs-update; https://www.modzero.com/static/meetingowl/Meeting_Owl_Pro_Security_Disclosure_Report_RELEASE.pdf
CVE: CVE-2022-31461
Published: 2022-06-02
Description: Owl Labs Meeting Owl 5.2.0.15 allows attackers to deactivate the passcode protection mechanism via a certain c 11 message.
CVSS Score: 7.4 (HIGH)
CWE: CWE-306
References: https://arstechnica.com/information-technology/2022/06/vulnerabilities-in-meeting-owl-videoconference-device-imperil-100k-users/; https://resources.owllabs.com/blog/owl-labs-update; https://www.modzero.com/static/meetingowl/Meeting_Owl_Pro_Security_Disclosure_Report_RELEASE.pdf
CVE: CVE-2022-31462
Published: 2022-06-02
Description: Owl Labs Meeting Owl 5.2.0.15 allows attackers to control the device via a backdoor password (derived from the serial number) that can be found in Bluetooth broadcast data.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-798
References: https://arstechnica.com/information-technology/2022/06/vulnerabilities-in-meeting-owl-videoconference-device-imperil-100k-users/; https://resources.owllabs.com/blog/owl-labs-update; https://www.modzero.com/static/meetingowl/Meeting_Owl_Pro_Security_Disclosure_Report_RELEASE.pdf
CVE: CVE-2022-31463
Published: 2022-06-02
Description: Owl Labs Meeting Owl 5.2.0.15 does not require a password for Bluetooth commands, because only client-side authentication is used.
CVSS Score: 8.2 (HIGH)
CWE: CWE-287
References: https://arstechnica.com/information-technology/2022/06/vulnerabilities-in-meeting-owl-videoconference-device-imperil-100k-users/; https://resources.owllabs.com/blog/owl-labs-update; https://www.modzero.com/static/meetingowl/Meeting_Owl_Pro_Security_Disclosure_Report_RELEASE.pdf
CVE: CVE-2022-29594
Published: 2022-06-02
Description: eG Agent before 7.2 has weak file permissions that enable escalation of privileges to SYSTEM.
CVSS Score: 7.8 (HIGH)
CWE: CWE-281
References: https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2022/MNDT-2022-0028/MNDT-2022-0028.md; https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2022/MNDT-2022-0028/MNDT-2022-0028.md
CVE: CVE-2022-30232
Published: 2022-06-02
Description: A CWE-20: Improper Input Validation vulnerability exists that could cause potential remote code execution when an attacker is able to intercept and modify a request on the same network or has configuration access to an ION device on the network. Affected Products: Wiser Smart, EER21000 & EER21001 (V4.5 and prior)
CVSS Score: 8.0 (HIGH)
CWE: CWE-20
References: https://www.se.com/ww/en/download/document/SEVD-2022-130-01/; https://www.se.com/ww/en/download/document/SEVD-2022-130-01/
CVE: CVE-2022-30233
Published: 2022-06-02
Description: A CWE-20: Improper Input Validation vulnerability exists that could allow the product to be maliciously manipulated when the user is tricked into performing certain actions on a webpage. Affected Products: Wiser Smart, EER21000 & EER21001 (V4.5 and prior)
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: https://www.se.com/ww/en/download/document/SEVD-2022-130-03/; https://www.se.com/ww/en/download/document/SEVD-2022-130-03/
CVE: CVE-2022-30234
Published: 2022-06-02
Description: A CWE-798: Use of Hard-coded Credentials vulnerability exists that could allow arbitrary code to be executed when root level access is obtained. Affected Products: Wiser Smart, EER21000 & EER21001 (V4.5 and prior)
CVSS Score: 9.4 (CRITICAL)
CWE: CWE-798
References: https://www.se.com/ww/en/download/document/SEVD-2022-130-03/; https://www.se.com/ww/en/download/document/SEVD-2022-130-03/
CVE: CVE-2022-30235
Published: 2022-06-02
Description: A CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists that could allow unauthorized access when an attacker uses brute force. Affected Products: Wiser Smart, EER21000 & EER21001 (V4.5 and prior)
CVSS Score: 8.6 (HIGH)
CWE: CWE-307
References: https://www.se.com/ww/en/download/document/SEVD-2022-130-03/; https://www.se.com/ww/en/download/document/SEVD-2022-130-03/
CVE: CVE-2022-30236
Published: 2022-06-02
Description: A CWE-669: Incorrect Resource Transfer Between Spheres vulnerability exists that could allow unauthorized access when an attacker uses cross-domain attacks. Affected Products: Wiser Smart, EER21000 & EER21001 (V4.5 and prior)
CVSS Score: 8.2 (HIGH)
CWE: CWE-669
References: https://www.se.com/ww/en/download/document/SEVD-2022-130-03/; https://www.se.com/ww/en/download/document/SEVD-2022-130-03/
CVE: CVE-2022-30237
Published: 2022-06-02
Description: A CWE-311: Missing Encryption of Sensitive Data vulnerability exists that could allow authentication credentials to be recovered when an attacker breaks the encoding. Affected Products: Wiser Smart, EER21000 & EER21001 (V4.5 and prior)
CVSS Score: 8.2 (HIGH)
CWE: CWE-311
References: https://www.se.com/ww/en/download/document/SEVD-2022-130-03/; https://www.se.com/ww/en/download/document/SEVD-2022-130-03/
CVE: CVE-2022-30238
Published: 2022-06-02
Description: A CWE-287: Improper Authentication vulnerability exists that could allow an attacker to take over the admin account when an attacker hijacks a session. Affected Products: Wiser Smart, EER21000 & EER21001 (V4.5 and prior)
CVSS Score: 8.3 (HIGH)
CWE: CWE-287
References: https://www.se.com/ww/en/download/document/SEVD-2022-130-03/; https://www.se.com/ww/en/download/document/SEVD-2022-130-03/
CVE: CVE-2022-29767
Published: 2022-06-03
Description: adbyby v2.7 allows external users to make connections via port 8118. This can cause a program logic error and lead to a Denial of Service (DoS) via high CPU usage due to a large number of connections.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-770
References: https://github.com/adbyby/Files/issues/2; https://github.com/adbyby/Files/issues/2
CVE: CVE-2022-32265
Published: 2022-06-03
Description: qDecoder before 12.1.0 does not ensure that the percent character is followed by two hex digits for URL decoding.
CVSS Score: 5.3 (MEDIUM)
References: https://github.com/wolkykim/qdecoder/pull/29; https://github.com/wolkykim/qdecoder/pull/29/commits/ce7c8a7ac450a823a11b06508ef1eb7441241f81#diff-1c4e2f5adfa1ad30618e78ff459b2c0758ecf34278459ad0a8d58db4fec622ea; https://github.com/wolkykim/qdecoder/releases/tag/v12.1.0
CVE: CVE-2022-32268
Published: 2022-06-03
Description: StarWind SAN and NAS v0.2 build 1914 allow remote code execution. A flaw was found in REST API in StarWind Stack. REST command, which allows changing the hostname, doesn’t check a new hostname parameter. It goes directly to bash as part of a script. An attacker with non-root user access can inject arbitrary data into the command that will be executed with root privileges.
CVSS Score: 8.8 (HIGH)
References: https://www.starwindsoftware.com/security/sw-20[PII_REDACTED]/; https://www.starwindsoftware.com/security/sw-20[PII_REDACTED]/
CVE: CVE-2022-32269
Published: 2022-06-03
Description: In Real Player 20.0.8.310, the G2 Control allows injection of unsafe javascript: URIs in local HTTP error pages (displayed by Internet Explorer core). This leads to arbitrary code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-79
References: https://github.com/Edubr2020/RealPlayer_G2_RCE; https://www.youtube.com/watch?v=9c9Q4VZQOUk; https://github.com/Edubr2020/RealPlayer_G2_RCE
CVE: CVE-2022-32270
Published: 2022-06-03
Description: In Real Player 20.0.7.309 and 20.0.8.310, external::Import() allows download of arbitrary file types and Directory Traversal, leading to Remote Code Execution. This occurs because it is possible to plant executables in the startup folder (DLL planting could also occur).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22
References: https://github.com/Edubr2020/RP_Import_RCE; https://youtu.be/CONlijEgDLc; https://github.com/Edubr2020/RP_Import_RCE
CVE: CVE-2022-32271
Published: 2022-06-03
Description: In Real Player 20.0.8.310, there is a DCP:// URI Remote Arbitrary Code Execution Vulnerability. This is an internal URL Protocol used by Real Player to reference a file that contains an URL. It is possible to inject script code to arbitrary domains. It is also possible to reference arbitrary local files.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-79
References: https://github.com/Edubr2020/RP_DCP_Code_Exec; https://youtu.be/AMODp3iTnqY; https://github.com/Edubr2020/RP_DCP_Code_Exec
CVE: CVE-2022-1987
Published: 2022-06-03
Description: Buffer Over-read in GitHub repository bfabiszewski/libmobi prior to 0.11.
CVSS Score: 8.1 (HIGH)
CWE: CWE-126, CWE-125
References: https://github.com/bfabiszewski/libmobi/commit/612562bc1ea38f1708b044e7a079c47a05b1291d; https://huntr.dev/bounties/e8[PII_REDACTED]-443e-a59f-2a86e8dda75f; https://github.com/bfabiszewski/libmobi/commit/612562bc1ea38f1708b044e7a079c47a05b1291d
CVE: CVE-2022-1988
Published: 2022-06-03
Description: Cross-site Scripting (XSS) - Generic in GitHub repository neorazorx/facturascripts prior to 2022.09.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/neorazorx/facturascripts/commit/93fc65ced3847a8e0837561e9fdfa0dbace2cfcb; https://huntr.dev/bounties/7882a35a-b27e-4d7e-9fcc-e9e009d0b01c; https://github.com/neorazorx/facturascripts/commit/93fc65ced3847a8e0837561e9fdfa0dbace2cfcb
CVE: CVE-2021-42884
Published: 2022-06-03
Description: TOTOLINK EX1200T V4.1.2cu.5215 contains a remote command injection vulnerability in function setDeviceName of the file global.so which can control thedeviceName to attack.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://github.com/p1Kk/vuln/blob/main/totolink_ex1200t_devicename_rce.md; https://github.com/p1Kk/vuln/blob/main/totolink_ex1200t_devicename_rce.md
CVE: CVE-2021-42885
Published: 2022-06-03
Description: TOTOLINK EX1200T V4.1.2cu.5215 contains a remote command injection vulnerability in function setDeviceMac of the file global.so which can control deviceName to attack.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://github.com/p1Kk/vuln/blob/main/totolink_ex1200t_devicemac_rce.md; https://github.com/p1Kk/vuln/blob/main/totolink_ex1200t_devicemac_rce.md
CVE: CVE-2021-42886
Published: 2022-06-03
Description: TOTOLINK EX1200T V4.1.2cu.5215 contains an information disclosure vulnerability where an attacker can get the apmib configuration file without authorization, and usernames and passwords can be found in the decoded file.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://github.com/p1Kk/vuln/blob/main/totolink_ex1200t_exportsettings_leak.md; https://github.com/p1Kk/vuln/blob/main/totolink_ex1200t_exportsettings_leak.md
CVE: CVE-2021-42887
Published: 2022-06-03
Description: In TOTOLINK EX1200T V4.1.2cu.5215, an attacker can bypass login by sending a specific request through formLoginAuth.htm.
CVSS Score: 9.8 (CRITICAL)
References: https://github.com/p1Kk/vuln/blob/main/totolink_ex1200t_login_bypass.md; https://github.com/p1Kk/vuln/blob/main/totolink_ex1200t_login_bypass.md
CVE: CVE-2021-42888
Published: 2022-06-03
Description: TOTOLINK EX1200T V4.1.2cu.5215 contains a remote command injection vulnerability in function setLanguageCfg of the file global.so which can control langType to attack.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://github.com/p1Kk/vuln/blob/main/totolink_ex1200t_langtype_rce.md; https://github.com/p1Kk/vuln/blob/main/totolink_ex1200t_langtype_rce.md
CVE: CVE-2021-42889
Published: 2022-06-03
Description: In TOTOLINK EX1200T V4.1.2cu.5215, an attacker can obtain sensitive information (wifikey, wifiname, etc.) without authorization.
CVSS Score: 7.5 (HIGH)
CWE: CWE-306
References: https://github.com/p1Kk/vuln/blob/main/totolink_ex1200t_getWiFiApConfig_leak.md; https://github.com/p1Kk/vuln/blob/main/totolink_ex1200t_getWiFiApConfig_leak.md
CVE: CVE-2021-42890
Published: 2022-06-03
Description: TOTOLINK EX1200T V4.1.2cu.5215 contains a remote command injection vulnerability in function NTPSyncWithHost of the file system.so which can control hostTime to attack.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://github.com/p1Kk/vuln/blob/main/totolink_ex1200t_hosttime_rce.md; https://github.com/p1Kk/vuln/blob/main/totolink_ex1200t_hosttime_rce.md
CVE: CVE-2021-42891
Published: 2022-06-03
Description: In TOTOLINK EX1200T V4.1.2cu.5215, an attacker can obtain sensitive information (wifikey, etc.) without authorization.
CVSS Score: 7.5 (HIGH)
CWE: CWE-306
References: https://github.com/p1Kk/vuln/blob/main/totolink_ex1200t_easywizard_leak.md; https://github.com/p1Kk/vuln/blob/main/totolink_ex1200t_easywizard_leak.md
CVE: CVE-2021-42892
Published: 2022-06-03
Description: In TOTOLINK EX1200T V4.1.2cu.5215, an attacker can start telnet without authorization because the default username and password exists in the firmware.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-798
References: https://github.com/p1Kk/vuln/blob/main/totolink_ex1200t_telnet_default.md; https://github.com/p1Kk/vuln/blob/main/totolink_ex1200t_telnet_default.md
CVE: CVE-2021-42893
Published: 2022-06-03
Description: In TOTOLINK EX1200T V4.1.2cu.5215, an attacker can obtain sensitive information (wifikey, etc.) without authorization through getSysStatusCfg.
CVSS Score: 7.5 (HIGH)
CWE: CWE-306
References: https://github.com/p1Kk/vuln/blob/main/totolink_ex1200t_sysstatus_leak.md; https://github.com/p1Kk/vuln/blob/main/totolink_ex1200t_sysstatus_leak.md