NBR200V2 vulnerabilities
9 known vulnerabilities in NBR200V2 from Netcore. 9 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 9.9 Critical severity
NBR200V2: Improper Neutralization of Special Elements used in a Command
A security flaw has been discovered in Netcore NBR200V2 1.3.241127.071246. Affected is the function system of the file /usr/bin/network_tools of the component Tools Ping Handler. Performing a manipulation of the argument url results in os command injection. Th
- 10.0 Critical severity
NBR200V2: Improper Neutralization of Special Elements used in a Command
A vulnerability was identified in Netcore NBR200V2 1.3.241127.071246. This impacts the function eval of the file /www/cgi-bin/network_tools of the component Web Management Interface. Such manipulation of the argument QUERY_STRING leads to os command injection.
- 9.9 Critical severity
NBR200V2: Improper Restriction of Operations within the Bounds of a Memory Buffer
A security vulnerability has been detected in Netcore NBR200V2 1.3.241127.071246. The affected element is the function vlan_load_form_uci of the file /usr/bin/routerd. The manipulation of the argument wan_num leads to buffer overflow. It is possible to initiat
- 9.9 Critical severity
NBR200V2: Improper Restriction of Operations within the Bounds of a Memory Buffer
A weakness has been identified in Netcore NBR200V2 1.3.241127.071246. Impacted is the function wan_config_set_vlan of the file /usr/bin/routerd of the component WAN VLAN Reconfiguration. Executing a manipulation of the argument vlan_wanX.ports can lead to buff
- 9.9 Critical severity
NBR200V2: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A security flaw has been discovered in Netcore NBR200V2 1.3.241127.071246. This issue affects some unknown processing of the file restore.cgi of the component Backup Restore. Performing a manipulation of the argument QUERY_STRING results in command injection.
- 9.1 Critical severity
NBR200V2: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability was identified in Netcore NBR200V2 1.3.241127.071246. This vulnerability affects unknown code of the file /www/cgi-bin/upgrade of the component Firmware Upgrade CGI Endpoint. Such manipulation of the argument QUERY_STRING leads to command injec
- 10.0 Critical severity
NBR200V2: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability was determined in Netcore NBR200V2 1.3.241127.071246. This affects an unknown part of the file /www/cgi-bin/network_tools of the component CGI Diagnostic Endpoint. This manipulation of the argument param/key/val causes command injection. Remote
- 9.9 Critical severity
NBR200V2: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability was found in Netcore NBR200V2 1.3.241127.071246. Affected by this issue is some unknown functionality of the file /usr/bin/network_tools of the component LAN IP Configuration Handler. The manipulation of the argument ipv4 results in command inj
- 9.9 Critical severity
NBR200V2: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability has been found in Netcore NBR200V2 1.3.241127.071246. Affected by this vulnerability is an unknown functionality of the file /usr/bin/network_tools of the component Traceroute Diagnostic Feature. The manipulation of the argument url leads to co