Robustel

R1510 Firmware

26 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5

CVE-2022-35262

Exploit
  • EPSS 0.33%
  • Veröffentlicht 25.10.2022 17:15:53
  • Zuletzt bearbeitet 21.11.2024 07:10:59

A denial of service vulnerability exists in the web_server hashFirst functionality of Robustel R1510 3.1.16 and 3.3.0. A specially-crafted network request can lead to denial of service. An attacker can send a sequence of requests to trigger this vuln...

7.5

CVE-2022-35261

Exploit
  • EPSS 0.69%
  • Veröffentlicht 25.10.2022 17:15:53
  • Zuletzt bearbeitet 21.11.2024 07:10:59

A denial of service vulnerability exists in the web_server hashFirst functionality of Robustel R1510 3.1.16 and 3.3.0. A specially-crafted network request can lead to denial of service. An attacker can send a sequence of requests to trigger this vuln...

7.2

CVE-2022-34850

Exploit
  • EPSS 1.4%
  • Veröffentlicht 25.10.2022 17:15:53
  • Zuletzt bearbeitet 21.11.2024 07:10:18

An OS command injection vulnerability exists in the web_server /action/import_authorized_keys/ functionality of Robustel R1510 3.1.16 and 3.3.0. A specially-crafted network request can lead to arbitrary command execution. An attacker can send a seque...

9.1

CVE-2022-33897

Exploit
  • EPSS 1.01%
  • Veröffentlicht 25.10.2022 17:15:53
  • Zuletzt bearbeitet 21.11.2024 07:08:33

A directory traversal vulnerability exists in the web_server /ajax/remove/ functionality of Robustel R1510 3.1.16. A specially-crafted network request can lead to arbitrary file deletion. An attacker can send a sequence of requests to trigger this vu...

9.8

CVE-2022-33150

Exploit
  • EPSS 1.08%
  • Veröffentlicht 25.10.2022 17:15:52
  • Zuletzt bearbeitet 21.11.2024 07:07:36

An OS command injection vulnerability exists in the js_package install functionality of Robustel R1510 3.1.16. A specially-crafted network request can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger this vu...

9.8

CVE-2022-32765

Exploit
  • EPSS 1.39%
  • Veröffentlicht 25.10.2022 17:15:52
  • Zuletzt bearbeitet 21.11.2024 07:06:55

An OS command injection vulnerability exists in the sysupgrade command injection functionality of Robustel R1510 3.1.16 and 3.3.0. A specially-crafted network request can lead to arbitrary command execution. An attacker can send a sequence of request...

9.1

CVE-2022-28127

Exploit
  • EPSS 5.31%
  • Veröffentlicht 30.06.2022 19:15:08
  • Zuletzt bearbeitet 21.11.2024 06:56:48

A data removal vulnerability exists in the web_server /action/remove/ API functionality of Robustel R1510 3.3.0. A specially-crafted network request can lead to arbitrary file deletion. An attacker can send a sequence of requests to trigger this vuln...

9.8

CVE-2022-33329

Exploit
  • EPSS 0.91%
  • Veröffentlicht 30.06.2022 19:15:08
  • Zuletzt bearbeitet 21.11.2024 07:08:12

Multiple command injection vulnerabilities exist in the web_server ajax endpoints functionalities of Robustel R1510 3.3.0. A specially-crafted network packets can lead to arbitrary command execution. An attacker can send a sequence of requests to tri...

9.8

CVE-2022-33328

Exploit
  • EPSS 3.52%
  • Veröffentlicht 30.06.2022 19:15:08
  • Zuletzt bearbeitet 21.11.2024 07:08:12

Multiple command injection vulnerabilities exist in the web_server ajax endpoints functionalities of Robustel R1510 3.3.0. A specially-crafted network packets can lead to arbitrary command execution. An attacker can send a sequence of requests to tri...

9.8

CVE-2022-33327

Exploit
  • EPSS 3.52%
  • Veröffentlicht 30.06.2022 19:15:08
  • Zuletzt bearbeitet 21.11.2024 07:08:12

Multiple command injection vulnerabilities exist in the web_server ajax endpoints functionalities of Robustel R1510 3.3.0. A specially-crafted network packets can lead to arbitrary command execution. An attacker can send a sequence of requests to tri...