B Qe2w401 Firmware

4 CVEs product

Monthly

CVE-2025-13800 MEDIUM POC This Month

A vulnerability was found in ADSLR NBR1005GPEV2 250814-r037c. This issue affects the function set_mesh_disconnect of the file /send_order.cgi. The manipulation of the argument mac results in command injection. It is possible to launch the attack remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.

Command Injection B Qe2w401 Firmware
NVD VulDB
CVSS 3.1
6.3
EPSS
0.4%
CVE-2025-13799 MEDIUM POC This Month

A vulnerability has been found in ADSLR NBR1005GPEV2 250814-r037c. This vulnerability affects the function ap_macfilter_del of the file /send_order.cgi. The manipulation of the argument mac leads to command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Command Injection B Qe2w401 Firmware
NVD VulDB
CVSS 3.1
6.3
EPSS
0.4%
CVE-2025-13798 MEDIUM POC This Month

A flaw has been found in ADSLR NBR1005GPEV2 250814-r037c. This affects the function ap_macfilter_add of the file /send_order.cgi. Executing manipulation of the argument mac can lead to command injection. The attack may be performed from remote. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Command Injection B Qe2w401 Firmware
NVD VulDB
CVSS 3.1
6.3
EPSS
0.6%
CVE-2025-13797 MEDIUM POC This Month

A vulnerability was detected in ADSLR B-QE2W401 250814-r037c. Affected by this issue is the function parameterdel_swifimac of the file /send_order.cgi. Performing manipulation of the argument del_swifimac results in command injection. The attack is possible to be carried out remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Command Injection B Qe2w401 Firmware
NVD VulDB
CVSS 3.1
6.3
EPSS
0.6%
CVE-2025-13800
EPSS 0% CVSS 6.3
MEDIUM POC This Month

A vulnerability was found in ADSLR NBR1005GPEV2 250814-r037c. This issue affects the function set_mesh_disconnect of the file /send_order.cgi. The manipulation of the argument mac results in command injection. It is possible to launch the attack remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.

Command Injection B Qe2w401 Firmware
NVD VulDB
CVE-2025-13799
EPSS 0% CVSS 6.3
MEDIUM POC This Month

A vulnerability has been found in ADSLR NBR1005GPEV2 250814-r037c. This vulnerability affects the function ap_macfilter_del of the file /send_order.cgi. The manipulation of the argument mac leads to command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Command Injection B Qe2w401 Firmware
NVD VulDB
CVE-2025-13798
EPSS 1% CVSS 6.3
MEDIUM POC This Month

A flaw has been found in ADSLR NBR1005GPEV2 250814-r037c. This affects the function ap_macfilter_add of the file /send_order.cgi. Executing manipulation of the argument mac can lead to command injection. The attack may be performed from remote. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Command Injection B Qe2w401 Firmware
NVD VulDB
CVE-2025-13797
EPSS 1% CVSS 6.3
MEDIUM POC This Month

A vulnerability was detected in ADSLR B-QE2W401 250814-r037c. Affected by this issue is the function parameterdel_swifimac of the file /send_order.cgi. Performing manipulation of the argument del_swifimac results in command injection. The attack is possible to be carried out remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Command Injection B Qe2w401 Firmware
NVD VulDB

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy