IP-COM kayıtları
ip-com üreticisine ait 21 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 5
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')13
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')4
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer1
- CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
21 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
45Planlayın | CVE-2022-45711İstismar yok | IP-COM M50 V15.11.0.33(10768) was discovered to contain a command injection vulnerability via the hostname parameter in the formSetNetCheckTip-com · m50 firmware · CWE-78 | Kritik9,8 | — | %20,2 | 23 Ara 2022 |
41Planlayın | CVE-2022-45005İstismar yok | IP-COM EW9 V15.11.0.14(9732) was discovered to contain a command injection vulnerability in the cmd_get_ping_output function.ip-com · ew9 firmware · CWE-78 | Kritik9,8 | — | %5,4 | 13 Ara 2022 |
41Planlayın | CVE-2022-43367İstismar yok | IP-COM EW9 V15.11.0.14(9732) was discovered to contain a command injection vulnerability in the formSetDebugCfg function.ip-com · ew9 firmware · CWE-77 | Kritik9,8 | — | %5,2 | 27 Eki 2022 |
40Planlayın | CVE-2022-45709İstismar yok | IP-COM M50 V15.11.0.33(10768) was discovered to contain multiple command injection vulnerabilities via the pEnable, pLevel, and pModule paraip-com · m50 firmware · CWE-78 | Kritik9,8 | — | %4,3 | 23 Ara 2022 |
40Planlayın | CVE-2022-45717İstismar yok | IP-COM M50 V15.11.0.33(10768) was discovered to contain a command injection vulnerability via the usbPartitionName parameter in the formSetUip-com · m50 firmware · CWE-78 | Kritik9,8 | — | %4,3 | 23 Ara 2022 |
39İzleyin | CVE-2022-45708İstismar yok | IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the sPortMapIndex parameter in the formDelPortMapping functionip-com · m50 firmware · CWE-120 | Kritik9,8 | — | %1,1 | 23 Ara 2022 |
39İzleyin | CVE-2022-45710İstismar yok | IP-COM M50 V15.11.0.33(10768) was discovered to contain multiple buffer overflows via the pEnable, pLevel, and pModule parameters in the forip-com · m50 firmware · CWE-120 | Kritik9,8 | — | %1,1 | 23 Ara 2022 |
39İzleyin | CVE-2022-45712İstismar yok | IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the rules parameter in the formAddDnsForward function.ip-com · m50 firmware · CWE-120 | Kritik9,8 | — | %1,1 | 23 Ara 2022 |
39İzleyin | CVE-2022-45714İstismar yok | IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the indexSet parameter in the formQOSRuleDel function.ip-com · m50 firmware · CWE-120 | Kritik9,8 | — | %1,1 | 23 Ara 2022 |
39İzleyin | CVE-2022-45715İstismar yok | IP-COM M50 V15.11.0.33(10768) was discovered to contain multiple buffer overflows via the pLanPortRange and pWanPortRange parameters in the ip-com · m50 firmware · CWE-120 | Kritik9,8 | — | %1,1 | 23 Ara 2022 |
39İzleyin | CVE-2022-45716İstismar yok | IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the indexSet parameter in the formIPMacBindDel function.ip-com · m50 firmware · CWE-120 | Kritik9,8 | — | %1,1 | 23 Ara 2022 |
39İzleyin | CVE-2022-45719İstismar yok | IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the gotoUrl parameter in the formPortalAuth function.ip-com · m50 firmware · CWE-120 | Kritik9,8 | — | %1,1 | 23 Ara 2022 |
39İzleyin | CVE-2022-45718İstismar yok | IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the rules parameter in the formIPMacBindAdd function.ip-com · m50 firmware · CWE-120 | Kritik9,8 | — | %1,1 | 23 Ara 2022 |
39İzleyin | CVE-2022-45721İstismar yok | IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the picName parameter in the formDelWewifiPic function.ip-com · m50 firmware · CWE-120 | Kritik9,8 | — | %1,1 | 23 Ara 2022 |
39İzleyin | CVE-2022-45720İstismar yok | IP-COM M50 V15.11.0.33(10768) was discovered to contain multiple buffer overflows via the ip, mac, and remark parameters in the formIPMacBinip-com · m50 firmware · CWE-120 | Kritik9,8 | — | %1,1 | 23 Ara 2022 |
39İzleyin | CVE-2022-45706İstismar yok | IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the hostname parameter in the formSetNetCheckTools function.ip-com · m50 firmware · CWE-120 | Kritik9,8 | — | %1,1 | 23 Ara 2022 |
39İzleyin | CVE-2022-45707İstismar yok | IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the rules parameter in the formAddDnsHijack function.ip-com · m50 firmware · CWE-120 | Kritik9,8 | — | %1,1 | 23 Ara 2022 |
36İzleyin | CVE-2026-2017İstismar yok | IP-COM W30AP POST Request wx3auth R7WebsSecurityHandler stack-based overflowip-com · w30ap firmware · CWE-119 | Yüksek8,9 | — | %4,6 | 6 Şub 2026 |
30İzleyin | CVE-2022-43365İstismar yok | IP-COM EW9 V15.11.0.14(9732) was discovered to contain a buffer overflow in the formSetDebugCfg function.ip-com · ew9 firmware · CWE-120 | Yüksek7,5 | — | %0,9 | 27 Eki 2022 |
30İzleyin | CVE-2022-43366İstismar yok | IP-COM EW9 V15.11.0.14(9732) allows unauthenticated attackers to access sensitive information via the checkLoginUser, ate, telnet, version, ip-com · ew9 firmware | Yüksek7,5 | — | %0,8 | 27 Eki 2022 |
30İzleyin | CVE-2022-43364İstismar yok | An access control issue in the password reset page of IP-COM EW9 V15.11.0.14(9732) allows unauthenticated attackers to arbitrarily change thip-com · ew9 firmware | Yüksek7,5 | — | %0,7 | 27 Eki 2022 |
- CVE-2022-4571145Planlayın
IP-COM M50 V15.11.0.33(10768) was discovered to contain a command injection vulnerability via the hostname parameter in the formSetNetCheckT
KritikCVSS 9,8İstismar yokEPSS %20ip-com · m50 firmware23 Ara 2022
- CVE-2022-4500541Planlayın
IP-COM EW9 V15.11.0.14(9732) was discovered to contain a command injection vulnerability in the cmd_get_ping_output function.
KritikCVSS 9,8İstismar yokEPSS %5ip-com · ew9 firmware13 Ara 2022
- CVE-2022-4336741Planlayın
IP-COM EW9 V15.11.0.14(9732) was discovered to contain a command injection vulnerability in the formSetDebugCfg function.
KritikCVSS 9,8İstismar yokEPSS %5ip-com · ew9 firmware27 Eki 2022
- CVE-2022-4570940Planlayın
IP-COM M50 V15.11.0.33(10768) was discovered to contain multiple command injection vulnerabilities via the pEnable, pLevel, and pModule para
KritikCVSS 9,8İstismar yokEPSS %4ip-com · m50 firmware23 Ara 2022
- CVE-2022-4571740Planlayın
IP-COM M50 V15.11.0.33(10768) was discovered to contain a command injection vulnerability via the usbPartitionName parameter in the formSetU
KritikCVSS 9,8İstismar yokEPSS %4ip-com · m50 firmware23 Ara 2022
- CVE-2022-4570839İzleyin
IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the sPortMapIndex parameter in the formDelPortMapping function
KritikCVSS 9,8İstismar yokEPSS %1ip-com · m50 firmware23 Ara 2022
- CVE-2022-4571039İzleyin
IP-COM M50 V15.11.0.33(10768) was discovered to contain multiple buffer overflows via the pEnable, pLevel, and pModule parameters in the for
KritikCVSS 9,8İstismar yokEPSS %1ip-com · m50 firmware23 Ara 2022
- CVE-2022-4571239İzleyin
IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the rules parameter in the formAddDnsForward function.
KritikCVSS 9,8İstismar yokEPSS %1ip-com · m50 firmware23 Ara 2022
- CVE-2022-4571439İzleyin
IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the indexSet parameter in the formQOSRuleDel function.
KritikCVSS 9,8İstismar yokEPSS %1ip-com · m50 firmware23 Ara 2022
- CVE-2022-4571539İzleyin
IP-COM M50 V15.11.0.33(10768) was discovered to contain multiple buffer overflows via the pLanPortRange and pWanPortRange parameters in the
KritikCVSS 9,8İstismar yokEPSS %1ip-com · m50 firmware23 Ara 2022
- CVE-2022-4571639İzleyin
IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the indexSet parameter in the formIPMacBindDel function.
KritikCVSS 9,8İstismar yokEPSS %1ip-com · m50 firmware23 Ara 2022
- CVE-2022-4571939İzleyin
IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the gotoUrl parameter in the formPortalAuth function.
KritikCVSS 9,8İstismar yokEPSS %1ip-com · m50 firmware23 Ara 2022
- CVE-2022-4571839İzleyin
IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the rules parameter in the formIPMacBindAdd function.
KritikCVSS 9,8İstismar yokEPSS %1ip-com · m50 firmware23 Ara 2022
- CVE-2022-4572139İzleyin
IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the picName parameter in the formDelWewifiPic function.
KritikCVSS 9,8İstismar yokEPSS %1ip-com · m50 firmware23 Ara 2022
- CVE-2022-4572039İzleyin
IP-COM M50 V15.11.0.33(10768) was discovered to contain multiple buffer overflows via the ip, mac, and remark parameters in the formIPMacBin
KritikCVSS 9,8İstismar yokEPSS %1ip-com · m50 firmware23 Ara 2022
- CVE-2022-4570639İzleyin
IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the hostname parameter in the formSetNetCheckTools function.
KritikCVSS 9,8İstismar yokEPSS %1ip-com · m50 firmware23 Ara 2022
- CVE-2022-4570739İzleyin
IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the rules parameter in the formAddDnsHijack function.
KritikCVSS 9,8İstismar yokEPSS %1ip-com · m50 firmware23 Ara 2022
- CVE-2026-201736İzleyin
IP-COM W30AP POST Request wx3auth R7WebsSecurityHandler stack-based overflow
YüksekCVSS 8,9İstismar yokEPSS %5ip-com · w30ap firmware6 Şub 2026
- CVE-2022-4336530İzleyin
IP-COM EW9 V15.11.0.14(9732) was discovered to contain a buffer overflow in the formSetDebugCfg function.
YüksekCVSS 7,5İstismar yokEPSS %1ip-com · ew9 firmware27 Eki 2022
- CVE-2022-4336630İzleyin
IP-COM EW9 V15.11.0.14(9732) allows unauthenticated attackers to access sensitive information via the checkLoginUser, ate, telnet, version,
YüksekCVSS 7,5İstismar yokEPSS %1ip-com · ew9 firmware27 Eki 2022
- CVE-2022-4336430İzleyin
An access control issue in the password reset page of IP-COM EW9 V15.11.0.14(9732) allows unauthenticated attackers to arbitrarily change th
YüksekCVSS 7,5İstismar yokEPSS %1ip-com · ew9 firmware27 Eki 2022