Xinruidz

Sundray Wan Controller Firmware

2 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
10

CVE-2019-9161

  • EPSS 3.68%
  • Published 18.04.2019 23:29:00
  • Last modified 21.11.2024 04:51:06

WAC on the Sangfor Sundray WLAN Controller version 3.7.4.2 and earlier has a Remote Code Execution issue allowing remote attackers to achieve full access to the system, because shell metacharacters in the nginx_webconsole.php Cookie header can be use...

10

CVE-2019-9160

  • EPSS 1.82%
  • Published 18.04.2019 22:29:00
  • Last modified 21.11.2024 04:51:06

WAC on the Sangfor Sundray WLAN Controller version 3.7.4.2 and earlier has a backdoor account allowing a remote attacker to login to the system via SSH (on TCP port 22345) and escalate to root (because the password for root is the WebUI admin passwor...