Skip to content
Noroxi

engeniustech records

17 published records for vendor engeniustech.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
4
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 19
  2. 24
  3. 25

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

17 records
  • CVE-2025-34035
    44Plan

    EnGenius EnShare IoT Gigabit Cloud Service Command Injection

    CriticalCVSS 10.0Proof of conceptEPSS 13%

    engeniustech · esr300 firmwareJun 23, 2025

  • CVE-2024-45242
    42Plan

    EnGenius ENH1350EXT A8J-ENH1350EXT devices through 3.9.3.2_c1.9.51 allow (blind) OS Command Injection via shell metacharacters to the Ping o

    HighCVSS 7.8No exploitEPSS 35%

    Oct 24, 2024

  • CVE-2019-11353
    40Plan

    The EnGenius EWS660AP router with firmware 2.0.284 allows an attacker to execute arbitrary commands using the built-in ping and traceroute u

    CriticalCVSS 9.8No exploitEPSS 3%

    engeniustech · ews660ap firmwareMay 9, 2019

  • CVE-2024-36061
    39Monitor

    EnGenius EWS356-FIT devices through 1.1.30 allow blind OS command injection.

    CriticalCVSS 9.8No exploitEPSS 1%

    engeniustech · ews356-fit firmwareNov 11, 2024

  • CVE-2024-36060
    35Monitor

    EnGenius EnStation5-AC A8J-ENS500AC 1.0.0 devices allow blind OS command injection via shell metacharacters in the Ping and Speed Test param

    HighCVSS 8.8No exploitEPSS 1%

    Oct 30, 2024

  • CVE-2024-31976
    32Monitor

    EnGenius EWS356-FIR 1.1.30 and earlier devices allow a remote attacker to execute arbitrary OS commands via the Controller connectivity para

    HighCVSS 8.0No exploitEPSS 1%

    engeniustech · ews356-fir firmwareNov 27, 2024

  • CVE-2024-11652
    29Monitor

    EnGenius ENH1350EXT/ENS500-AC/ENS620EXT sn_https command injection

    MediumCVSS 5.1No exploitEPSS 30%

    engeniustech · enh1350ext firmwareNov 24, 2024

  • CVE-2024-11653
    29Monitor

    EnGenius ENH1350EXT/ENS500-AC/ENS620EXT diag_traceroute command injection

    MediumCVSS 5.1No exploitEPSS 29%

    engeniustech · enh1350ext firmwareNov 25, 2024

  • CVE-2024-11658
    29Monitor

    EnGenius ENH1350EXT/ENS500-AC/ENS620EXT ajax_getChannelList command injection

    MediumCVSS 5.1No exploitEPSS 29%

    engeniustech · enh1350ext firmwareNov 25, 2024

  • CVE-2024-11659
    29Monitor

    EnGenius ENH1350EXT/ENS500-AC/ENS620EXT diag_iperf command injection

    MediumCVSS 5.1No exploitEPSS 29%

    engeniustech · enh1350ext firmwareNov 25, 2024

  • CVE-2024-11657
    29Monitor

    EnGenius ENH1350EXT/ENS500-AC/ENS620EXT diag_nslookup command injection

    MediumCVSS 5.1No exploitEPSS 29%

    engeniustech · enh1350ext firmwareNov 25, 2024

  • CVE-2024-11654
    29Monitor

    EnGenius ENH1350EXT/ENS500-AC/ENS620EXT diag_traceroute6 command injection

    MediumCVSS 5.1No exploitEPSS 29%

    engeniustech · enh1350ext firmwareNov 25, 2024

  • CVE-2024-11655
    29Monitor

    EnGenius ENH1350EXT/ENS500-AC/ENS620EXT diag_pinginterface command injection

    MediumCVSS 5.1No exploitEPSS 29%

    engeniustech · enh1350ext firmwareNov 25, 2024

  • CVE-2024-11656
    29Monitor

    EnGenius ENH1350EXT/ENS500-AC/ENS620EXT diag_ping6 command injection

    MediumCVSS 5.1No exploitEPSS 29%

    engeniustech · enh1350ext firmwareNov 25, 2024

  • CVE-2024-11651
    28Monitor

    EnGenius ENH1350EXT/ENS500-AC/ENS620EXT wifi_schedule command injection

    MediumCVSS 5.1No exploitEPSS 27%

    engeniustech · enh1350ext firmwareNov 24, 2024

  • CVE-2025-28371
    26Monitor

    EnGenius ENH500 AP 2T2R V3.0 FW3.7.22 is vulnerable to Incorrect Access Control via the password change function.

    MediumCVSS 6.5No exploitEPSS 0%

    engeniustech · enh500 firmwareMay 19, 2025

  • CVE-2024-31975
    19Monitor

    EnGenius EWS356-Fit devices through 1.1.30 allow a remote attacker to conduct stored XSS attacks via the Wi-Fi SSID parameters.

    MediumCVSS 4.8No exploitEPSS 0%

    engeniustech · ews356-fit firmwareOct 30, 2024