Siretta Quartz-Gold vulnerabilities

CVE-2022-42493 [CRITICAL] CWE-78 CVE-2022-42493: Several OS command injection vulnerabilities exist in the m2m binary of Siretta QUARTZ-GOLD G5.0.1.5 Several OS command injection vulnerabilities exist in the m2m binary of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network request can lead to arbitrary command execution. An attacker can send a network request to trigger these vulnerabilities.This command injection is reachable through the m2m's DOWNLOAD_INFO command.

CVE-2022-42490 [CRITICAL] CWE-78 CVE-2022-42490: Several OS command injection vulnerabilities exist in the m2m binary of Siretta QUARTZ-GOLD G5.0.1.5 Several OS command injection vulnerabilities exist in the m2m binary of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network request can lead to arbitrary command execution. An attacker can send a network request to trigger these vulnerabilities.This command injection is reachable through the m2m's DOWNLOAD_CFG_FILE command

CVE-2022-42491 [CRITICAL] CWE-78 CVE-2022-42491: Several OS command injection vulnerabilities exist in the m2m binary of Siretta QUARTZ-GOLD G5.0.1.5 Several OS command injection vulnerabilities exist in the m2m binary of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network request can lead to arbitrary command execution. An attacker can send a network request to trigger these vulnerabilities.This command injection is reachable through the m2m's M2M_CONFIG_SET command

CVE-2022-42492 [CRITICAL] CWE-78 CVE-2022-42492: Several OS command injection vulnerabilities exist in the m2m binary of Siretta QUARTZ-GOLD G5.0.1.5 Several OS command injection vulnerabilities exist in the m2m binary of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network request can lead to arbitrary command execution. An attacker can send a network request to trigger these vulnerabilities.This command injection is reachable through the m2m's DOWNLOAD_AD command.

CVE-2022-40222 [CRITICAL] CWE-78 CVE-2022-40222: An OS command injection vulnerability exists in the m2m DELETE_FILE cmd functionality of Siretta QUA An OS command injection vulnerability exists in the m2m DELETE_FILE cmd functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network request can lead to arbitrary command execution. An attacker can send a network request to trigger this vulnerability.

CVE-2022-42484 [CRITICAL] CWE-78 CVE-2022-42484: An OS command injection vulnerability exists in the httpd logs/view.cgi functionality of FreshTomato An OS command injection vulnerability exists in the httpd logs/view.cgi functionality of FreshTomato 2022.5. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can send an HTTP request to trigger this vulnerability.

CVE-2022-41010 [CRITICAL] CWE-120 CVE-2022-41010: Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functiona Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.This buffer overflow is in the function that

CVE-2022-41009 [CRITICAL] CWE-120 CVE-2022-41009: Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functiona Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.This buffer overflow is in the function that

CVE-2022-38066 [HIGH] CWE-78 CVE-2022-38066: An OS command injection vulnerability exists in the httpd SNMP functionality of Siretta QUARTZ-GOLD An OS command injection vulnerability exists in the httpd SNMP functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted HTTP response can lead to arbitrary command execution. An attacker can send a network request to trigger this vulnerability.

CVE-2022-41017 [CRITICAL] CWE-120 CVE-2022-41017: Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functiona Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.This buffer overflow is in the function that

CVE-2022-41018 [CRITICAL] CWE-120 CVE-2022-41018: Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functiona Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.This buffer overflow is in the function that

CVE-2022-41003 [CRITICAL] CWE-120 CVE-2022-41003: Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functiona Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.This buffer overflow is in the function that

CVE-2022-41008 [CRITICAL] CWE-120 CVE-2022-41008: Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functiona Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.This buffer overflow is in the function that

CVE-2022-41004 [CRITICAL] CWE-120 CVE-2022-41004: Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functiona Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.This buffer overflow is in the function that

CVE-2022-41007 [CRITICAL] CWE-120 CVE-2022-41007: Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functiona Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.This buffer overflow is in the function that

CVE-2022-41030 [CRITICAL] CWE-120 CVE-2022-41030: Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functiona Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.This buffer overflow is in the function that

CVE-2022-41012 [CRITICAL] CWE-120 CVE-2022-41012: Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functiona Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.This buffer overflow is in the function that

CVE-2022-41001 [CRITICAL] CWE-120 CVE-2022-41001: Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functiona Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.This buffer overflow is in the function that

CVE-2022-41015 [CRITICAL] CWE-120 CVE-2022-41015: Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functiona Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.This buffer overflow is in the function that

CVE-2022-41016 [CRITICAL] CWE-120 CVE-2022-41016: Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functiona Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.This buffer overflow is in the function that