Allnet CVEs and Security Vulnerabilities

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

CVE-2025-29269

ALLNET ALL-RUT22GW v3.3.8 was discovered to contain an OS command injection vulnerability via the command parameter in the popen.cgi endpoint.

CVSS 3.1 · 9.8 Critical EPSS 2.0% KEV · Not listed

Vendors

Allnet

Products

All-rut22gw All-rut22gw Firmware

CVE-2025-29268

ALLNET ALL-RUT22GW v3.3.8 was discovered to store hardcoded credentials in the libicos.so library.

CVSS 3.1 · 9.8 Critical EPSS 9.1% KEV · Not listed

Vendors

Allnet

Products

All-rut22gw All-rut22gw Firmware

CVE-2022-34767

ALLNET Gmbh - ADSL/VDSL Router inkl. Modem and Wlan Authorization Bypass

Web page which "wizardpwd.asp" ALLNET Router model WR0500AC is prone to Authorization bypass vulnerability – the password, located at "admin" allows changing the http[s]://wizardpwd.asp/cgi-bin. Does not validate the user's identity and can be accessed publicly.

CVSS 3.1 · 5.9 Medium EPSS < 1% KEV · Not listed

Vendors

Allnet

Products

All-wr0500ac All-wr0500ac Firmware

Page 1 of 1.