RaspAP kayıtları
raspap üreticisine ait 16 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 1 · %6,3
- Pre-auth RCE
- 4
- Düzeltme kaydı olan
- %31,3
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')6
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')3
- CWE-94 Improper Control of Generation of Code ('Code Injection')2
- CWE-23 Relative Path Traversal1
- CWE-269 Improper Privilege Management1
- CWE-732 Incorrect Permission Assignment for Critical Resource1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
16 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
69Bu hafta | CVE-2022-39986Silahlaştırılmış | A Command injection vulnerability in RaspAP 2.8.0 thru 2.8.7 allows unauthenticated attackers to execute arbitrary commands via the cfg_id praspap · raspap · CWE-77 | Kritik9,8 | — | %99,0 | 1 Ağu 2023 |
46Planlayın | CVE-2022-39987İstismar yok | A Command injection vulnerability in RaspAP 2.8.0 thru 2.9.2 allows an authenticated attacker to execute arbitrary OS commands as root via traspap · raspap · CWE-77 | Yüksek8,8 | — | %37,3 | 1 Ağu 2023 |
44Planlayın | CVE-2021-33357Kavram kanıtı | A vulnerability exists in RaspAP 2.6 to 2.6.5 in the "iface" GET parameter in /ajax/networking/get_netcfg.php, when the "iface" parameter varaspap · raspap · CWE-78 | Kritik9,8 | — | %17,4 | 9 Haz 2021 |
40Planlayın | CVE-2024-36622İstismar yok | In RaspAP raspap-webgui 3.0.9 and earlier, a command injection vulnerability exists in the clearlog.php script.raspap · raspap-webgui · CWE-94 | Kritik9,8 | — | %2,8 | 29 Kas 2024 |
39İzleyin | CVE-2021-38556İstismar yok | includes/configure_client.php in RaspAP 2.6.6 allows attackers to execute commands via command injection.raspap · raspap · CWE-77 | Yüksek8,8 | — | %13,0 | 24 Ağu 2021 |
39İzleyin | CVE-2025-50428Kavram kanıtı | In RaspAP raspap-webgui 3.3.2 and earlier, a command injection vulnerability exists in the includes/hostapd.php script.raspap · raspap-webgui · CWE-77 | Kritik9,8 | — | %1,6 | 27 Ağu 2025 |
37İzleyin | CVE-2020-24572Kavram kanıtı | An issue was discovered in includes/webconsole.php in RaspAP 2.5.raspap · raspap · CWE-78 | Yüksek8,8 | — | %6,7 | 24 Ağu 2020 |
37İzleyin | CVE-2021-33356İstismar yok | Multiple privilege escalation vulnerabilities in RaspAP 1.5 to 2.6.5 could allow an authenticated remote attacker to inject arbitrary commanraspap · raspap · CWE-269 | Yüksek8,8 | — | %5,3 | 9 Haz 2021 |
36İzleyin | CVE-2021-33358İstismar yok | Multiple vulnerabilities exist in RaspAP 2.3 to 2.6.5 in the "interface", "ssid" and "wpa_passphrase" POST parameters in /hostapd, when the raspap · raspap · CWE-78 | Yüksek8,8 | — | %2,7 | 9 Haz 2021 |
36İzleyin | CVE-2023-30260İstismar yok | Command injection vulnerability in RaspAP raspap-webgui 2.8.8 and earlier allows remote attackers to run arbitrary commands via crafted POSTraspap · raspap · CWE-77 | Yüksek8,8 | — | %2,4 | 23 Haz 2023 |
36İzleyin | CVE-2021-38557İstismar yok | raspap-webgui in RaspAP 2.6.6 allows attackers to execute commands as root because of the insecure sudoers permissions.raspap · raspap · CWE-732 | Yüksek8,8 | — | %2,2 | 24 Ağu 2021 |
33İzleyin | CVE-2024-41637İstismar yok | RaspAP before 3.1.5 allows an attacker to escalate privileges: the www-data user has write access to the restapi.service file and also posseCWE-77 | Yüksek8,3 | — | %0,8 | 29 Tem 2024 |
30İzleyin | CVE-2024-28754İstismar yok | RaspAP (aka raspap-webgui) through 3.0.9 allows remote attackers to cause a persistent denial of service (bricking) via a crafted request.raspap · raspap | Yüksek7,5 | — | %0,8 | 8 Mar 2024 |
28İzleyin | CVE-2024-2497İstismar yok | RaspAP raspap-webgui HTTP POST Request provider.php code injectionraspap · raspap · CWE-94 | Yüksek7,2 | — | %0,9 | 15 Mar 2024 |
26İzleyin | CVE-2024-28753İstismar yok | RaspAP (aka raspap-webgui) through 3.0.9 allows remote attackers to read the /etc/passwd file via a crafted request.raspap · raspap | Orta6,5 | — | %0,6 | 8 Mar 2024 |
25İzleyin | CVE-2025-44163İstismar yok | RaspAP raspap-webgui 3.3.1 is vulnerable to Directory Traversal in ajax/networking/get_wgkey.php.raspap · raspap-webgui · CWE-23 | Orta6,3 | — | %0,6 | 27 Haz 2025 |
- CVE-2022-3998669Bu hafta
A Command injection vulnerability in RaspAP 2.8.0 thru 2.8.7 allows unauthenticated attackers to execute arbitrary commands via the cfg_id p
KritikCVSS 9,8SilahlaştırılmışEPSS %99raspap · raspap1 Ağu 2023
- CVE-2022-3998746Planlayın
A Command injection vulnerability in RaspAP 2.8.0 thru 2.9.2 allows an authenticated attacker to execute arbitrary OS commands as root via t
YüksekCVSS 8,8İstismar yokEPSS %37raspap · raspap1 Ağu 2023
- CVE-2021-3335744Planlayın
A vulnerability exists in RaspAP 2.6 to 2.6.5 in the "iface" GET parameter in /ajax/networking/get_netcfg.php, when the "iface" parameter va
KritikCVSS 9,8Kavram kanıtıEPSS %17raspap · raspap9 Haz 2021
- CVE-2024-3662240Planlayın
In RaspAP raspap-webgui 3.0.9 and earlier, a command injection vulnerability exists in the clearlog.php script.
KritikCVSS 9,8İstismar yokEPSS %2raspap · raspap-webgui29 Kas 2024
- CVE-2021-3855639İzleyin
includes/configure_client.php in RaspAP 2.6.6 allows attackers to execute commands via command injection.
YüksekCVSS 8,8İstismar yokEPSS %13raspap · raspap24 Ağu 2021
- CVE-2025-5042839İzleyin
In RaspAP raspap-webgui 3.3.2 and earlier, a command injection vulnerability exists in the includes/hostapd.php script.
KritikCVSS 9,8Kavram kanıtıEPSS %1raspap · raspap-webgui27 Ağu 2025
- CVE-2020-2457237İzleyin
An issue was discovered in includes/webconsole.php in RaspAP 2.5.
YüksekCVSS 8,8Kavram kanıtıEPSS %6raspap · raspap24 Ağu 2020
- CVE-2021-3335637İzleyin
Multiple privilege escalation vulnerabilities in RaspAP 1.5 to 2.6.5 could allow an authenticated remote attacker to inject arbitrary comman
YüksekCVSS 8,8İstismar yokEPSS %5raspap · raspap9 Haz 2021
- CVE-2021-3335836İzleyin
Multiple vulnerabilities exist in RaspAP 2.3 to 2.6.5 in the "interface", "ssid" and "wpa_passphrase" POST parameters in /hostapd, when the
YüksekCVSS 8,8İstismar yokEPSS %2raspap · raspap9 Haz 2021
- CVE-2023-3026036İzleyin
Command injection vulnerability in RaspAP raspap-webgui 2.8.8 and earlier allows remote attackers to run arbitrary commands via crafted POST
YüksekCVSS 8,8İstismar yokEPSS %2raspap · raspap23 Haz 2023
- CVE-2021-3855736İzleyin
raspap-webgui in RaspAP 2.6.6 allows attackers to execute commands as root because of the insecure sudoers permissions.
YüksekCVSS 8,8İstismar yokEPSS %2raspap · raspap24 Ağu 2021
- CVE-2024-4163733İzleyin
RaspAP before 3.1.5 allows an attacker to escalate privileges: the www-data user has write access to the restapi.service file and also posse
YüksekCVSS 8,3İstismar yokEPSS %029 Tem 2024
- CVE-2024-2875430İzleyin
RaspAP (aka raspap-webgui) through 3.0.9 allows remote attackers to cause a persistent denial of service (bricking) via a crafted request.
YüksekCVSS 7,5İstismar yokEPSS %0raspap · raspap8 Mar 2024
- CVE-2024-249728İzleyin
RaspAP raspap-webgui HTTP POST Request provider.php code injection
YüksekCVSS 7,2İstismar yokEPSS %0raspap · raspap15 Mar 2024
- CVE-2024-2875326İzleyin
RaspAP (aka raspap-webgui) through 3.0.9 allows remote attackers to read the /etc/passwd file via a crafted request.
OrtaCVSS 6,5İstismar yokEPSS %0raspap · raspap8 Mar 2024
- CVE-2025-4416325İzleyin
RaspAP raspap-webgui 3.3.1 is vulnerable to Directory Traversal in ajax/networking/get_wgkey.php.
OrtaCVSS 6,3İstismar yokEPSS %0raspap · raspap-webgui27 Haz 2025