N3m Firmware vulnerabilities
8 known vulnerabilities in N3m Firmware from Netis-systems. 8 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.5 High severity
n3m: Buffer Copy without Checking Size of Input
Netis N3Mv2-V1.0.1.865 was discovered to contain a buffer overflow via the pingWdogIp. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.
- 7.5 High severity
n3m: Buffer Copy without Checking Size of Input
Netis N3Mv2-V1.0.1.865 was discovered to contain a buffer overflow via the servDomain parameter. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.
- 7.5 High severity
n3m_firmware: Buffer Copy without Checking Size of Input
Netis N3Mv2-V1.0.1.865 was discovered to contain a buffer overflow via the hostName parameter in the FUN_0040dabc function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.
- 7.5 High severity
n3m_firmware: Incorrect Authorization
An issue in NETIS SYSTEMS N3Mv2 v.1.0.1.865 allows a remote attacker to cause a denial of service via the authorization component in the HTTP request.
- 9.8 Critical severity
n3m_firmware: Improper Neutralization of Special Elements used in an OS Command
Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability via the wakeup_mac parameter in the Wake-On-LAN (WoL) function. This vulnerability is exploited via a crafted payload.
- 9.8 Critical severity
n3m_firmware: Improper Neutralization of Special Elements used in an OS Command
Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability via the Hostname parameter within the WAN settings. This vulnerability is exploited via a crafted payload.
- 9.8 Critical severity
n3m_firmware: Improper Neutralization of Special Elements used in a Command
Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability in the Changing Username and Password function. This vulnerability is exploited via a crafted payload.
- 8.8 High severity
n3m_firmware: Improper Neutralization of Special Elements used in an OS Command
Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability in the diagnostic tools page. This vulnerability is exploited via a crafted HTTP request.