deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-13308
Published: 2025-01-09
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Browser Back Button allows Cross-Site Scripting (XSS).This issue affects Browser Back Button: from 1.0.0 before 2.0.2.
CVSS Score: 3.8 (LOW)
CWE: CWE-79
References: https://www.drupal.org/sa-contrib-2024-072
CVE: CVE-2024-13309
Published: 2025-01-09
Description: Improper Authentication vulnerability in Drupal Login Disable allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Login Disable: from 2.0.0 before 2.1.1.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-287
References: https://www.drupal.org/sa-contrib-2024-073
CVE: CVE-2024-13310
Published: 2025-01-09
Description: Vulnerability in Drupal Git Utilities for Drupal.This issue affects Git Utilities for Drupal: *.*.
CVSS Score: 6.5 (MEDIUM)
References: https://www.drupal.org/sa-contrib-2024-074
CVE: CVE-2024-13311
Published: 2025-01-09
Description: Vulnerability in Drupal Allow All File Extensions for file fields.This issue affects Allow All File Extensions for file fields: *.*.
CVSS Score: 7.3 (HIGH)
References: https://www.drupal.org/sa-contrib-2024-075
CVE: CVE-2024-13312
Published: 2025-01-09
Description: Missing Authorization vulnerability in Drupal Open Social allows Forceful Browsing.This issue affects Open Social: from 11.8.0 before 12.3.10, from 12.4.0 before 12.4.9.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-862
References: https://www.drupal.org/sa-contrib-2024-076
CVE: CVE-2024-48806
Published: 2025-01-09
Description: Buffer Overflow vulnerability in Neat Board NFC v.1.20[PII_REDACTED] allows a physically proximate attackers to escalate privileges via a crafted payload to the password field
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-120
References: https://support.neat.no/article/devices-running-microsoft-teams-allow-for-buffer-overflow-vulnerability/
CVE: CVE-2024-55224
Published: 2025-01-09
Description: An HTML injection vulnerability in Vaultwarden prior to v1.32.5 allows attackers to execute arbitrary code via injecting a crafted payload into the username field of an e-mail message.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-79
References: https://github.com/dani-garcia/vaultwarden/releases/tag/1.32.4; https://github.com/dani-garcia/vaultwarden/releases/tag/1.32.5; https://insinuator.net/2024/11/vulnerability-disclosure-authentication-bypass-in-vaultwarden-versions-1-32-5/
CVE: CVE-2024-55225
Published: 2025-01-09
Description: An issue in the component src/api/identity.rs of Vaultwarden prior to v1.32.5 allows attackers to impersonate users, including Administrators, via a crafted authorization request.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-276
References: https://github.com/dani-garcia/vaultwarden/releases/tag/1.32.4; https://github.com/dani-garcia/vaultwarden/releases/tag/1.32.5; https://insinuator.net/2024/11/vulnerability-disclosure-authentication-bypass-in-vaultwarden-versions-1-32-5/
CVE: CVE-2024-55226
Published: 2025-01-09
Description: Vaultwarden v1.32.5 was discovered to contain an authenticated reflected cross-site scripting (XSS) vulnerability via the component /api/core/mod.rs.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/dani-garcia/vaultwarden/releases/tag/1.32.4; https://github.com/dani-garcia/vaultwarden/releases/tag/1.32.5; https://insinuator.net/2024/11/vulnerability-disclosure-authentication-bypass-in-vaultwarden-versions-1-32-5/
CVE: CVE-2023-28354
Published: 2025-01-09
Description: An issue was discovered in Opsview Monitor Agent 6.8. An unauthenticated remote attacker can call check_nrpe against affected targets, specifying known NRPE plugins, which in default installations are configured to accept command control characters and pass them to command-line interpreters for NRPE plugin execution. This allows the attacker to escape NRPE plugin execution and execute commands remotely on the target as NT_AUTHORITY\SYSTEM.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://github.com/stormfleet/CVE-2023-28354/blob/main/README.md
CVE: CVE-2024-46464
Published: 2025-01-09
Description: In PRIMX ZED Enterprise up to 2024.3, technical files stored in local folders with common user access can be manipulated to render the host computer unavailable or to execute programs with an elevation of privilege.
CVSS Score: 7.8 (HIGH)
CWE: CWE-276
References: https://www.primx.eu/en/bulletins/security-bulletin-24931935/
CVE: CVE-2024-51229
Published: 2025-01-09
Description: Cross Site Scripting vulnerability in LinZhaoguan pb-cms v.2.0 allows a remote attacker to execute arbitrary code via the theme management function.
CVSS Score: 8.8 (HIGH)
CWE: CWE-79
References: https://gitee.com/LinZhaoguan/pb-cms/issues/IAYHUP
CVE: CVE-2025-21385
Published: 2025-01-09
Description: A Server-Side Request Forgery (SSRF) vulnerability in Microsoft Purview allows an authorized attacker to disclose information over a network.
CVSS Score: 8.8 (HIGH)
CWE: CWE-918
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21385
CVE: CVE-2024-56376
Published: 2025-01-09
Description: A stored cross-site scripting (XSS) vulnerability in the built-in messenger of REDCap 14.9.6 allows authenticated users to inject malicious scripts into the message field. When a user click on the received message, the crafted payload is executed, potentially enabling the execution of arbitrary web scripts.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/ping-oui-no/Vulnerability-Research-CVESS/blob/main/RedCap/CVE-2024-56376/README.md; https://www.evms.edu/research/resources_services/redcap/redcap_change_log/
CVE: CVE-2024-56377
Published: 2025-01-09
Description: A stored cross-site scripting (XSS) vulnerability in survey titles of REDCap 14.9.6 allows authenticated users to inject malicious scripts into the Survey Title field or Survey Instructions. When a user receives a survey and clicks anywhere on the survey page to enter data, the crafted payload (which has been injected into all survey fields) is executed, potentially enabling the execution of arbitrary web scripts.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/ping-oui-no/Vulnerability-Research-CVESS/blob/main/RedCap/CVE-2024-56377/README.md; https://www.evms.edu/research/resources_services/redcap/redcap_change_log/
CVE: CVE-2025-21380
Published: 2025-01-09
Description: Improper access control in Azure SaaS Resources allows an authorized attacker to disclose information over a network.
CVSS Score: 8.8 (HIGH)
CWE: CWE-284
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21380
CVE: CVE-2024-12473
Published: 2025-01-10
Description: The AI Scribe – SEO AI Writer, Content Generator, Humanizer, Blog Writer, SEO Optimizer, DALLE-3, AI WordPress Plugin ChatGPT (GPT-4o 128K) plugin for WordPress is vulnerable to SQL Injection via the 'template_id' parameter of the 'article_builder_generate_data' shortcode in all versions up to, and including, 2.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for authenticated attackers, with Contributor-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: https://plugins.trac.wordpress.org/browser/ai-scribe-the-chatgpt-powered-seo-content-creation-wizard/trunk/article_builder.php#L891; https://plugins.trac.wordpress.org/changeset/3308461; https://www.wordfence.com/threat-intel/vulnerabilities/id/79125ac2-f3ed-40c9-a81b-340195fc8da5?source=cve
CVE: CVE-2024-12606
Published: 2025-01-10
Description: The AI Scribe – SEO AI Writer, Content Generator, Humanizer, Blog Writer, SEO Optimizer, DALLE-3, AI WordPress Plugin ChatGPT (GPT-4o 128K) plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the engine_request_data() function in all versions up to, and including, 2.5. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update plugin settings.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: https://plugins.trac.wordpress.org/browser/ai-scribe-the-chatgpt-powered-seo-content-creation-wizard/trunk/article_builder.php#L730; https://plugins.trac.wordpress.org/changeset/3308461; https://www.wordfence.com/threat-intel/vulnerabilities/id/4bc4a765-719e-4e99-b7f3-d255e4c019f5?source=cve
CVE: CVE-2025-0311
Published: 2025-01-10
Description: The Orbit Fox by ThemeIsle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Pricing Table widget in all versions up to, and including, 2.10.43 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/Codeinwp/themeisle-companion/commit/47a17c86934cebbfc3f1a812f1afcaa20515c1f7; https://github.com/Codeinwp/themeisle-companion/commit/c311050b372cf38e82d8ec9deadf4f21a8931487; https://plugins.trac.wordpress.org/browser/themeisle-companion/trunk/obfx_modules/elementor-extra-widgets/widgets/elementor/pricing-table.php#L1024
CVE: CVE-2024-13183
Published: 2025-01-10
Description: The Orbit Fox by ThemeIsle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘title_tag’ parameter in all versions up to, and including, 2.10.43 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/Codeinwp/themeisle-companion/commit/47a17c86934cebbfc3f1a812f1afcaa20515c1f7; https://plugins.trac.wordpress.org/browser/themeisle-companion/trunk/obfx_modules/elementor-extra-widgets/widgets/elementor/pricing-table.php#L118; https://plugins.trac.wordpress.org/changeset/3219568/
CVE: CVE-2024-13318
Published: 2025-01-10
Description: The Essential WP Real Estate plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the cl_delete_listing_func() function in all versions up to, and including, 1.1.3. This makes it possible for unauthenticated attackers to delete arbitrary pages and posts.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-463
References: https://plugins.trac.wordpress.org/browser/essential-wp-real-estate/trunk/src/Common/Ajax/Ajax.php#L724; https://www.wordfence.com/threat-intel/vulnerabilities/id/6a1a9e22-d174-43fc-aab6-f6968067a290?source=cve
CVE: CVE-2025-23016
Published: 2025-01-10
Description: FastCGI fcgi2 (aka fcgi) 2.x through 2.4.4 has an integer overflow (and resultant heap-based buffer overflow) via crafted nameLen or valueLen values in data to the IPC socket. This occurs in ReadParams in fcgiapp.c.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-190
References: https://github.com/FastCGI-Archives/fcgi2/issues/67; https://github.com/FastCGI-Archives/fcgi2/releases/tag/2.4.5; https://www.synacktiv.com/en/publications/cve-2025-23016-exploiting-the-fastcgi-library
CVE: CVE-2024-57822
Published: 2025-01-10
Description: In Raptor RDF Syntax Library through 2.0.16, there is a heap-based buffer over-read when parsing triples with the nquads parser in raptor_ntriples_parse_term_internal().
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-125
References: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1067896; https://github.com/dajobe/raptor/issues/70; https://github.com/pedrib/PoC/blob/master/fuzzing/raptor-fuzz.md
CVE: CVE-2024-57823
Published: 2025-01-10
Description: In Raptor RDF Syntax Library through 2.0.16, there is an integer underflow when normalizing a URI with the turtle parser in raptor_uri_normalize_path().
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-191
References: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1067896; https://github.com/dajobe/raptor/issues/70; https://github.com/pedrib/PoC/blob/master/fuzzing/raptor-fuzz.md
CVE: CVE-2024-41787
Published: 2025-01-10
Description: IBM Engineering Requirements Management DOORS Next 7.0.2 and 7.0.3 could allow a remote attacker to bypass security restrictions, caused by a race condition. By sending a specially crafted request, an attacker could exploit this vulnerability to remotely execute code.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-367
References: https://www.ibm.com/support/pages/node/7180636
CVE: CVE-2024-57686
Published: 2025-01-10
Description: A Cross Site Scripting (XSS) vulnerability was found in /landrecordsys/admin/contactus.php in PHPGurukul Land Record System v1.0, which allows remote attackers to execute arbitrary code via the "pagetitle" parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-79
References: https://github.com/Santoshcyber1/CVE-wirteup/blob/main/Phpgurukul/Land%20record/Reflected%20Cross%20Site%20Scripting.pdf; https://github.com/lhRaMk7/notebook/blob/main/phar_rce
CVE: CVE-2024-57687
Published: 2025-01-10
Description: An OS Command Injection vulnerability was found in /landrecordsys/admin/dashboard.php in PHPGurukul Land Record System v1.0, which allows remote attackers to execute arbitrary code via the "Cookie" GET request parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://github.com/Santoshcyber1/CVE-wirteup/blob/main/Phpgurukul/Land%20record/Command%20Injection.pdf
CVE: CVE-2025-22946
Published: 2025-01-10
Description: Tenda ac9 v1.0 firmware v15.03.05.19 contains a stack overflow vulnerability in /goform/SetOnlineDevName, which may lead to remote arbitrary code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: https://noisy-caravel-a9a.notion.site/Tenda_AC9V1-0_V15-03-05-19_formSetDeviceName_sprintf_bof-16f898c94eac8057afcbceb63fda7d24
CVE: CVE-2025-23022
Published: 2025-01-10
Description: FreeType 2.8.1 has a signed integer overflow in cf2_doFlex in cff/cf2intrp.c.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-190, CWE-190
References: https://gitlab.freedesktop.org/freetype/freetype/-/issues/1312; https://security-tracker.debian.org/tracker/CVE-2025-23022
CVE: CVE-2024-25371
Published: 2025-01-10
Description: Gramine before a390e33e16ed374a40de2344562a937f289be2e1 suffers from an Interface vulnerability due to mismatching SW signals vs HW exceptions.
CVSS Score: 7.5 (HIGH)
References: https://github.com/ahoi-attacks/sigy/blob/main/pocs/gramine/cve.md; https://github.com/gramineproject/gramine/commit/a390e33e16ed374a40de2344562a937f289be2e1
CVE: CVE-2024-29970
Published: 2025-01-10
Description: Fortanix Enclave OS 3.36.1941-EM has an interface vulnerability that leads to state corruption via injected signals.
CVSS Score: 9.8 (CRITICAL)
References: https://github.com/ahoi-attacks/sigy/blob/main/pocs/enclaveos/cve.md; https://support.fortanix.com/hc/en-us/sections/[PII_REDACTED]51-Enclave-OS
CVE: CVE-2024-29971
Published: 2025-01-10
Description: Scontain SCONE 5.8.0 has an interface vulnerability that leads to state corruption via injected signals.
CVSS Score: 9.8 (CRITICAL)
References: https://github.com/ahoi-attacks/sigy/blob/main/pocs/scone/cve.md; https://scontain.com
CVE: CVE-2024-46210
Published: 2025-01-10
Description: An arbitrary file upload vulnerability in the MediaPool module of Redaxo CMS v5.17.1 allows attackers to execute arbitrary code via uploading a crafted file.
CVSS Score: 7.2 (HIGH)
CWE: CWE-434
References: https://gist.github.com/h4ckr4v3n/26eaa57d94f749b597ede8b404c234df; https://github.com/h4ckr4v3n/research_redaxo_5_17_1.git
CVE: CVE-2024-50807
Published: 2025-01-10
Description: Trippo Responsive Filemanager 9.14.0 is vulnerable to Cross Site Scripting (XSS) via file upload using the svg and pdf extensions.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://gist.github.com/HackShiv/4254db[PII_REDACTED]7aa8dd5c1ec09b7e; https://gist.github.com/SecShiv/4254db[PII_REDACTED]7aa8dd5c1ec09b7e; https://github.com/SecShiv/CVE/blob/main/CVE-2024-50807.md
CVE: CVE-2024-56511
Published: 2025-01-10
Description: DataEase is an open source data visualization analysis tool. Prior to 2.10.4, there is a flaw in the authentication in the io.dataease.auth.filter.TokenFilter class, which can be bypassed and cause the risk of unauthorized access. In the io.dataease.auth.filter.TokenFilter class, ”request.getRequestURI“ is used to obtain the request URL, and it is passed to the "WhitelistUtils.match" method to determine whether the URL request is an interface that does not require authentication. The "match" method filters semicolons, but this is not enough. When users set "server.servlet.context-path" when deploying products, there is still a risk of being bypassed, which can be bypassed by any whitelist prefix /geo/../context-path/. The vulnerability has been fixed in v2.10.4.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-289
References: https://github.com/dataease/dataease/security/advisories/GHSA-9f69-p73j-m73x
CVE: CVE-2025-22152
Published: 2025-01-10
Description: Atheos is a self-hosted browser-based cloud IDE. Prior to v600, the $path and $target parameters are not properly validated across multiple components, allowing an attacker to read, modify, or execute arbitrary files on the server. These vulnerabilities can be exploited through various attack vectors present in multiple PHP files. This vulnerability is fixed in v600.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-22, CWE-94, CWE-434, CWE-94
References: https://github.com/Atheos/Atheos/security/advisories/GHSA-rgjm-6p59-537v
CVE: CVE-2025-22596
Published: 2025-01-10
Description: WeGIA is a web manager for charitable institutions. A Reflected Cross-Site Scripting (XSS) vulnerability was identified in the modulos_visiveis.php endpoint of the WeGIA application. This vulnerability allows attackers to inject malicious scripts in the msg_c parameter. This vulnerability is fixed in 3.2.8.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-jcj3-gqj3-rrvm
CVE: CVE-2025-22597
Published: 2025-01-10
Description: WeGIA is a web manager for charitable institutions. A Stored Cross-Site Scripting (XSS) vulnerability was identified in the CobrancaController.php endpoint of the WeGIA application. This vulnerability allows attackers to inject malicious scripts into the local_recepcao parameter. The injected scripts are stored on the server and executed automatically whenever the affected page is accessed by users, posing a significant security risk. This vulnerability is fixed in 3.2.8.
CVSS Score: 8.3 (HIGH)
CWE: CWE-79
References: https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-mgj3-g922-2r9v
CVE: CVE-2025-22598
Published: 2025-01-10
Description: WeGIA is a web manager for charitable institutions. A Stored Cross-Site Scripting (XSS) vulnerability was identified in the cadastrarSocio.php endpoint of the WeGIA application. This vulnerability allows attackers to inject malicious scripts into the local_recepcao parameter. The injected scripts are stored on the server and executed automatically whenever the affected page is accessed by users, posing a significant security risk. This vulnerability is fixed in 3.2.8.
CVSS Score: 8.3 (HIGH)
CWE: CWE-79
References: https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-9x2j-pw3h-p53f
CVE: CVE-2025-22599
Published: 2025-01-10
Description: WeGIA is a web manager for charitable institutions. A Reflected Cross-Site Scripting (XSS) vulnerability was identified in the home.php endpoint of the WeGIA application. This vulnerability allows attackers to inject malicious scripts in the msg_c parameter. This vulnerability is fixed in 3.2.8.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-8354-6cxw-7g8c
CVE: CVE-2025-22600
Published: 2025-01-10
Description: WeGIA is a web manager for charitable institutions. A Reflected Cross-Site Scripting (XSS) vulnerability was identified in the configuracao_doacao.php endpoint of the WeGIA application. This vulnerability allows attackers to inject malicious scripts in the avulso parameter. This vulnerability is fixed in 3.2.8.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-v856-wjh3-4rhg
CVE: CVE-2025-22949
Published: 2025-01-10
Description: Tenda ac9 v1.0 firmware v15.03.05.19 is vulnerable to command injection in /goform/SetSambaCfg, which may lead to remote arbitrary code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: https://noisy-caravel-a9a.notion.site/Tenda_AC9V1-0_V15-03-05-19_formSetSambaConf_doSystemCmd_CI-16f898c94eac80d5801bdaf777ac2b27
CVE: CVE-2024-54846
Published: 2025-01-10
Description: An issue in CP Plus CP-VNR-3104 B3223P22C02424 allows attackers to obtain the EC private key and access sensitive data or execute a man-in-the-middle attack.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-295
References: https://github.com/Yashodhanvivek/CP-VNR-3104-NVR-Vulnerabilties/blob/main/CPPlus_CP-VNR-3104_Security_Assessment.pdf; https://nvd.nist.gov/vuln/detail/CVE-2020-15522; https://payatu.com/blog/solving-the-problem-of-encrypted-firmware/
CVE: CVE-2024-54847
Published: 2025-01-10
Description: An issue in CP Plus CP-VNR-3104 B3223P22C02424 allows attackers to access the Diffie-Hellman (DH) parameters and access sensitive data or execute a man-in-the-middle attack.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-295
References: https://github.com/Yashodhanvivek/CP-VNR-3104-NVR-Vulnerabilties/blob/main/CPPlus_CP-VNR-3104_Security_Assessment.pdf; https://nvd.nist.gov/vuln/detail/CVE-2023-3817; https://payatu.com/blog/solving-the-problem-of-encrypted-firmware/
CVE: CVE-2024-54848
Published: 2025-01-10
Description: Improper handling and storage of certificates in CP Plus CP-VNR-3104 B3223P22C02424 allow attackers to decrypt communications or execute a man-in-the-middle attacks.
CVSS Score: 7.4 (HIGH)
CWE: CWE-295
References: https://capec.mitre.org/data/definitions/233; https://github.com/Yashodhanvivek/CP-VNR-3104-NVR-Vulnerabilties/blob/main/CPPlus_CP-VNR-3104_Security_Assessment.pdf; https://nvd.nist.gov/vuln/detail/CVE-2021-21551
CVE: CVE-2024-54849
Published: 2025-01-10
Description: An issue in CP Plus CP-VNR-3104 B3223P22C02424 allows attackers to obtain the second RSA private key and access sensitive data or execute a man-in-the-middle attack.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-295
References: https://nvd.nist.gov/vuln/detail/CVE-2020-15522; https://payatu.com/blog/solving-the-problem-of-encrypted-firmware/
CVE: CVE-2024-57211
Published: 2025-01-10
Description: TOTOLINK A6000R V1.0.1-B20[PII_REDACTED] was discovered to contain a command injection vulnerability via the modifyOne parameter in the enable_wsh function.
CVSS Score: 8.0 (HIGH)
CWE: CWE-77
References: https://github.com/yanggao017/vuln/blob/main/TOTOLINK/A6000R/CI_11_enable_wsh/README.md; https://github.com/yanggao017/vuln/blob/main/TOTOLINK/A6000R/CI_11_enable_wsh/README.md
CVE: CVE-2024-57212
Published: 2025-01-10
Description: TOTOLINK A6000R V1.0.1-B20[PII_REDACTED] was discovered to contain a command injection vulnerability via the opmode parameter in the action_reboot function.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-77
References: https://github.com/yanggao017/vuln/blob/main/TOTOLINK/A6000R/CI_10_action_reboot/README.md; https://github.com/yanggao017/vuln/blob/main/TOTOLINK/A6000R/CI_10_action_reboot/README.md
CVE: CVE-2024-57213
Published: 2025-01-10
Description: TOTOLINK A6000R V1.0.1-B20[PII_REDACTED] was discovered to contain a command injection vulnerability via the newpasswd parameter in the action_passwd function.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-77
References: https://github.com/yanggao017/vuln/blob/main/TOTOLINK/A6000R/CI_9_action_passwd/README.md
CVE: CVE-2024-57214
Published: 2025-01-10
Description: TOTOLINK A6000R V1.0.1-B20[PII_REDACTED] was discovered to contain a command injection vulnerability via the devname parameter in the reset_wifi function.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-77
References: https://github.com/yanggao017/vuln/tree/main/TOTOLINK/A6000R/CI_8_reset_wifi