CVE-2019-13140
Published Sep 16, 2019Inteno EG200 EG200-WU7P1U_ADAMO3.16.4-190226_1650 routers have a JUCI ACL misconfiguration that allows the "user" account to extract the 3DES key via JSON commands to ubus. The 3D…
Vendor archive
intenogroup CVEs
Beta · best-effort5 CVEs tagged to vendor intenogroup — 0 Critical, 4 High, 1 Medium, 0 Low, 0 Unrated.
CVE-2018-14533
Published Jul 31, 2018read_tmp and write_tmp in Inteno IOPSYS allow attackers to gain privileges after writing to /tmp/etc/smb.conf because /var is a symlink to /tmp.
CVE-2018-10123
Published May 16, 2018p910nd on Inteno IOPSYS 2.0 through 4.2.0 allows remote attackers to read, or append data to, arbitrary files via requests on TCP port 9100.
CVE-2017-17867
Published Jan 4, 2018Inteno iopsys 2.0-3.14 and 4.0 devices allow remote authenticated users to execute arbitrary OS commands by modifying the leasetrigger field in the odhcpd configuration to specify…
CVE-2017-11361
Published Jul 17, 2017Inteno routers have a JUCI ACL misconfiguration that allows the "user" account to read files, write to files, and add root SSH keys via JSON commands to ubus. (Exploitation is som…
Showing 1-5 of 5 CVEsPage 1 of 1