CF-N1 vulnerabilities
6 known vulnerabilities in CF-N1 from Comfast. 6 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.8 High severity
CF-N1: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability was identified in Comfast CF-N1 2.6.0. This vulnerability affects the function wireless_device_dissoc of the file /usr/bin/webmgnt. Such manipulation of the argument mac leads to command injection. The attack may be performed from a remote loca
- 8.8 High severity
CF-N1: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability was determined in Comfast CF-N1 2.6.0. This affects the function wifilith_delete_pic_file of the file /usr/bin/webmgnt. This manipulation of the argument portal_delete_picname causes command injection. The attack is possible to be carried out r
- 8.8 High severity
CF-N1: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability was found in Comfast CF-N1 2.6.0. Affected by this issue is the function update_interface_png of the file /usr/bin/webmgnt. The manipulation of the argument interface/display_name results in command injection. The attack can be executed remotel
- 8.8 High severity
CF-N1: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability has been found in Comfast CF-N1 2.6.0. Affected by this vulnerability is the function ping_config of the file /usr/bin/webmgnt. The manipulation leads to command injection. Remote exploitation of the attack is possible. The exploit has been dis
- 9.8 Critical severity
CF-N1: Improper Neutralization of Special Elements used in a Command
A flaw has been found in Comfast CF-N1 2.6.0. Affected is the function ntp_timezone of the file /usr/bin/webmgnt. Executing manipulation of the argument timestr can lead to command injection. The attack may be launched remotely. The exploit has been published
- 9.8 Critical severity
CF-N1: Improper Neutralization of Special Elements used in a Command
A vulnerability was detected in Comfast CF-N1 2.6.0. This impacts the function multi_pppoe of the file /usr/bin/webmgnt. Performing manipulation of the argument phy_interface results in command injection. The attack may be initiated remotely. The exploit is no