Snmp Web Pro
Monthly
Unauthenticated remote code execution in Voltronic Power SNMP Web Pro 1.1 lets remote attackers gain root on the device by POSTing a crafted tar archive to the upload.cgi firmware-update endpoint. Because the archive is extracted into a privileged directory and its contents executed as root without any credential check, a single request yields full system compromise. Publicly available exploit code exists (VulnCheck advisory plus a GitHub PoC); this is not yet listed in CISA KEV.
Cross Site Scripting (XSS) in Voltronic Power SNMP Web Pro v.1.1 allows an attacker to execute arbitrary code via a crafted script within a request to the webserver. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
An issue in SNMP Web Pro v.1.1 allows a remote attacker to execute arbitrary code and obtain senstive information via a crafted request. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
The authentication mechanism in PowerShield SNMP Web Pro 1.1 contains a vulnerability that allows unauthenticated users to directly access Common Gateway Interface (CGI) scripts without proper. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
Unauthenticated remote code execution in Voltronic Power SNMP Web Pro 1.1 lets remote attackers gain root on the device by POSTing a crafted tar archive to the upload.cgi firmware-update endpoint. Because the archive is extracted into a privileged directory and its contents executed as root without any credential check, a single request yields full system compromise. Publicly available exploit code exists (VulnCheck advisory plus a GitHub PoC); this is not yet listed in CISA KEV.
Cross Site Scripting (XSS) in Voltronic Power SNMP Web Pro v.1.1 allows an attacker to execute arbitrary code via a crafted script within a request to the webserver. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
An issue in SNMP Web Pro v.1.1 allows a remote attacker to execute arbitrary code and obtain senstive information via a crafted request. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
The authentication mechanism in PowerShield SNMP Web Pro 1.1 contains a vulnerability that allows unauthenticated users to directly access Common Gateway Interface (CGI) scripts without proper. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.