M50 Firmware vulnerabilities
6 known vulnerabilities in M50 Firmware from Ip-com. 6 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 9.8 Critical severity
M50 Firmware: Buffer Copy without Checking Size of Input
IP-COM M50 V15.11.0.33(10768) was discovered to contain multiple buffer overflows via the ip, mac, and remark parameters in the formIPMacBindModify function.
- 9.8 Critical severity
M50 Firmware: Improper Neutralization of Special Elements used in an OS Command
IP-COM M50 V15.11.0.33(10768) was discovered to contain a command injection vulnerability via the usbPartitionName parameter in the formSetUSBPartitionUmount function. This vulnerability is exploited via a crafted GET request.
- 9.8 Critical severity
M50 Firmware: Buffer Copy without Checking Size of Input
IP-COM M50 V15.11.0.33(10768) was discovered to contain multiple buffer overflows via the pLanPortRange and pWanPortRange parameters in the formSetPortMapping function.
- 9.8 Critical severity
M50 Firmware: Improper Neutralization of Special Elements used in an OS Command
IP-COM M50 V15.11.0.33(10768) was discovered to contain a command injection vulnerability via the hostname parameter in the formSetNetCheckTools function.
- 9.8 Critical severity
M50 Firmware: Buffer Copy without Checking Size of Input
IP-COM M50 V15.11.0.33(10768) was discovered to contain multiple buffer overflows via the pEnable, pLevel, and pModule parameters in the formSetDebugCfg function.
- 9.8 Critical severity
M50 Firmware: Improper Neutralization of Special Elements used in an OS Command
IP-COM M50 V15.11.0.33(10768) was discovered to contain multiple command injection vulnerabilities via the pEnable, pLevel, and pModule parameters in the formSetDebugCfg function.