#cwe-78

共收录 1628 条相关情报。

← 返回所有主题
漏洞预警2026-08-09 发布CRITICAL

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the macfilter function that allows remote attackers to execute arbitrary commands...

CVE-2026-71992

CVE-2026-71992 是 MSI Radix AXE6600 路由器固件版本 v781521 中存在的一个命令注入漏洞。漏洞位于该设备的 macfilter(MAC 地址过滤)功能中,远程攻击者无需身份验证即可利用该功能注入恶意命令

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-09 发布CRITICAL

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the TelnetSSH function used for Telnet configuration that allows remote attackers...

CVE-2026-71991

该漏洞存在于MSI Radix AXE6600路由器固件版本v781521中,具体位于用于Telnet配置的TelnetSSH函数。该函数未对用户输入进行充分过滤,导致远程攻击者能够通过Telnet配置界面注入任意系统命令。由于该接口默认可

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-09 发布CRITICAL

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the TelnetSSH function used for SSH configuration that allows remote attackers to...

CVE-2026-71990

CVE-2026-71990 是 MSI Radix AXE6600 路由器固件版本 v781521 中存在的一个命令注入漏洞,位于 TelnetSSH 功能中,该功能用于 SSH 配置。远程攻击者无需任何身份验证即可通过网络访问 SSH

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-09 发布CRITICAL

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the porTrigger function that allows remote attackers to execute arbitrary command...

CVE-2026-71989

CVE-2026-71989 是 MSI Radix AXE6600 路由器固件版本 v781521 中存在的一个命令注入漏洞。该漏洞位于 porTrigger 函数中,远程攻击者无需身份验证即可利用,且攻击复杂度低。攻击者可通过 alg

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-09 发布CRITICAL

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the portFw function that allows remote attackers to execute arbitrary commands on...

CVE-2026-71988

CVE-2026-71988 是 MSI Radix AXE6600 路由器固件 v781521 中存在的一处命令注入漏洞。漏洞点位于 portFw 函数,该函数负责处理端口转发相关配置,但未能对用户输入进行有效的净化处理。远程攻击者可利用

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-09 发布CRITICAL

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the alg function that allows remote attackers to execute arbitrary commands on th...

CVE-2026-71987

MSI Radix AXE6600路由器固件版本v781521的alg函数中存在命令注入漏洞。该函数的功能是处理某种算法或加密操作,但由于对用户输入的命令参数未进行有效的过滤和验证,远程攻击者可以通过向设备的网络接口发送特制的请求,在alg

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-09 发布CRITICAL

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the dmz function that allows remote attackers to execute arbitrary commands on th...

CVE-2026-71986

MSI Radix AXE6600 路由器固件版本 v781521 的 DMZ 功能中存在一个严重的命令注入漏洞(CVE-2026-71986)。该漏洞允许远程攻击者无需任何身份认证或用户交互,通过向路由器的 DMZ 功能发送特制请求,在底

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-09 发布CRITICAL

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the accesscontrol function that allows remote attackers to execute arbitrary comm...

CVE-2026-71985

MSI Radix AXE6600 路由器固件版本 v781521 的 accesscontrol 函数中存在命令注入漏洞。该漏洞允许远程攻击者通过向该函数传入特制输入,在底层操作系统上执行任意命令,进而获取 root 权限。由于漏洞点位于

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-09 发布CRITICAL

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the urlfilter function that allows remote attackers to execute arbitrary commands...

CVE-2026-71984

CVE-2026-71984 是 MSI Radix AXE6600 路由器固件版本 v781521 中存在的一处命令注入漏洞。该漏洞位于 urlfilter 功能中,远程攻击者无需认证即可通过网络利用该功能注入恶意命令,进而在受影响设备上

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-08 发布CRITICAL

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the wps.cgi interface that allows remote attackers to execute arbitrary commands ...

CVE-2026-71983

CVE-2026-71983 是一个影响 MSI Radix AXE6600 路由器(固件版本 v781521)的高危命令注入漏洞。漏洞位于该设备的 wps.cgi 接口中,具体参数为 pin2g、pin5g 和 pin6g。由于这些参数在

历史摘要 · 未重新核验 · NVD

安全公告2026-08-08 发布INFO

D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1...

CVE-2026-71952

D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a command inj

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-08 发布INFO

D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1...

CVE-2026-71949

D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a command inj

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-08 发布INFO

D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1...

CVE-2026-71953

D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a command inj

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-08 发布INFO

D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1...

CVE-2026-71954

D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a command inj

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-08 发布INFO

D-Link DWR-M961 devices with hardware version C1 and software version 1.1.2_C1_202602110044...

CVE-2026-71955

D-Link DWR-M961 devices with hardware version C1 and software version 1.1.2_C1_202602110044 contain a command injection

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-08 发布INFO

D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1...

CVE-2026-71950

D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a command inj

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-08 发布INFO

D-Link DWR-M961 devices with hardware version C1 and software version 1.1.2_C1_202602110044...

CVE-2026-71956

D-Link DWR-M961 devices with hardware version C1 and software version 1.1.2_C1_202602110044 contain a command injection

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-08 发布INFO

D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1...

CVE-2026-71948

D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a command inj

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-08 发布INFO

D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1...

CVE-2026-71945

D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a command inj

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-08 发布INFO

D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1...

CVE-2026-71947

D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a command inj

历史摘要 · 未重新核验 · GitHub Advisory