FreshTomato vulnerabilities
We track 5 vulnerabilities in FreshTomato products. 5 are rated high or critical, and none are known to be exploited. The most recent was published on October 16, 2023.
Latest FreshTomato vulnerabilities
- 9.8 Critical severity
FreshTomato: Improper Neutralization of Special Elements used in an OS Command
An OS command injection vulnerability exists in the httpd iperfrun.cgi functionality of FreshTomato 2023.3. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can send an HTTP request to trigger this vulnerability.
- 9.8 Critical severity
FreshTomato: Improper Neutralization of Special Elements used in an OS Command
An OS command injection vulnerability exists in the httpd logs/view.cgi functionality of FreshTomato 2022.5. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can send an HTTP request to trigger this vulnerability.
- 7.5 High severity
FreshTomato: Improper Limitation of a Pathname to a Restricted Directory
A directory traversal vulnerability exists in the httpd update.cgi functionality of FreshTomato 2022.5. A specially crafted HTTP request can lead to arbitrary file read. An attacker can send an HTTP request to trigger this vulnerability.
- 9.8 Critical severity
FreshTomato: Out-of-bounds Write
A memory corruption vulnerability exists in the httpd unescape functionality of FreshTomato 2022.1. A specially-crafted HTTP request can lead to memory corruption. An attacker can send a network request to trigger this vulnerability.The `freshtomato-arm` has a
- 9.8 Critical severity
FreshTomato: Out-of-bounds Write
A memory corruption vulnerability exists in the httpd unescape functionality of FreshTomato 2022.1. A specially-crafted HTTP request can lead to memory corruption. An attacker can send a network request to trigger this vulnerability.The `freshtomato-mips` has