Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2019-25487

SAPIDO RB-1732 V2.0.43 Remote Command Execution via formSysCmd

SAPIDO RB-1732 V2.0.43 contains a remote command execution vulnerability that allows unauthenticated attackers to execute arbitrary system commands by submitting malicious input to the formSysCmd endpoint. Attackers can send POST requests with the sysCmd parameter containing shell commands to execute code on the device with router privileges.

CVSS 4.0 · 9.3 Critical EPSS 9.0% KEV · Not listed
Vendors
Sapido
Products
Rb-1732
CVE-2021-4242

Sapido BR270n/BRC76n/GR297/RB1732 syscmd.htm os command injection

A vulnerability was found in Sapido BR270n, BRC76n, GR297 and RB1732 and classified as critical. Affected by this issue is some unknown functionality of the file ip/syscmd.htm. The manipulation leads to os command injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-214592.

CVSS 3.1 · 6.3 Medium EPSS 3.2% KEV · Not listed
Vendors
Sapido
Products
Br270n Br270n Firmware Brc76n and 5 more