R1510 Firmware vulnerabilities

25 known vulnerabilities in R1510 Firmware from Robustel. 25 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

25vulnerabilities

13critical

12high

0exploited

8.6average CVSS score

Latest first

7.5 High severity
R1510: Improper Neutralization of Special Elements used in a Command
CVE-2022-35271Oct 25, 2022RobustelEPSS 1.15%
A denial of service vulnerability exists in the web_server hashFirst functionality of Robustel R1510 3.1.16 and 3.3.0. A specially-crafted network request can lead to denial of service. An attacker can send a sequence of requests to trigger this vulnerability.
7.5 High severity
R1510: Improper Neutralization of Special Elements used in a Command
CVE-2022-35270Oct 25, 2022RobustelEPSS 1.18%
A denial of service vulnerability exists in the web_server hashFirst functionality of Robustel R1510 3.1.16 and 3.3.0. A specially-crafted network request can lead to denial of service. An attacker can send a sequence of requests to trigger this vulnerability.
7.5 High severity
R1510: Improper Neutralization of Special Elements used in a Command
CVE-2022-35269Oct 25, 2022RobustelEPSS 1.18%
A denial of service vulnerability exists in the web_server hashFirst functionality of Robustel R1510 3.1.16 and 3.3.0. A specially-crafted network request can lead to denial of service. An attacker can send a sequence of requests to trigger this vulnerability.
7.5 High severity
R1510: Improper Handling of Exceptional Conditions
CVE-2022-35268Oct 25, 2022RobustelEPSS 1.06%
A denial of service vulnerability exists in the web_server hashFirst functionality of Robustel R1510 3.1.16 and 3.3.0. A specially-crafted network request can lead to denial of service. An attacker can send a sequence of requests to trigger this vulnerability.
7.5 High severity
R1510: Improper Neutralization of Special Elements used in a Command
CVE-2022-35267Oct 25, 2022RobustelEPSS 1.18%
A denial of service vulnerability exists in the web_server hashFirst functionality of Robustel R1510 3.1.16 and 3.3.0. A specially-crafted network request can lead to denial of service. An attacker can send a sequence of requests to trigger this vulnerability.
7.5 High severity
R1510: Improper Neutralization of Special Elements used in a Command
CVE-2022-35266Oct 25, 2022RobustelEPSS 1.18%
A denial of service vulnerability exists in the web_server hashFirst functionality of Robustel R1510 3.1.16 and 3.3.0. A specially-crafted network request can lead to denial of service. An attacker can send a sequence of requests to trigger this vulnerability.
7.5 High severity
R1510: Improper Neutralization of Special Elements used in a Command
CVE-2022-35265Oct 25, 2022RobustelEPSS 1.18%
A denial of service vulnerability exists in the web_server hashFirst functionality of Robustel R1510 3.1.16 and 3.3.0. A specially-crafted network request can lead to denial of service. An attacker can send a sequence of requests to trigger this vulnerability.
7.5 High severity
R1510: Out-of-bounds Read
CVE-2022-35264Oct 25, 2022RobustelEPSS 1.06%
A denial of service vulnerability exists in the web_server hashFirst functionality of Robustel R1510 3.1.16 and 3.3.0. A specially-crafted network request can lead to denial of service. An attacker can send a sequence of requests to trigger this vulnerability.
7.5 High severity
R1510: Out-of-bounds Read
CVE-2022-35263Oct 25, 2022RobustelEPSS 1.02%
A denial of service vulnerability exists in the web_server hashFirst functionality of Robustel R1510 3.1.16 and 3.3.0. A specially-crafted network request can lead to denial of service. An attacker can send a sequence of requests to trigger this vulnerability.
7.5 High severity
R1510: Out-of-bounds Read
CVE-2022-35262Oct 25, 2022RobustelEPSS 1.02%
A denial of service vulnerability exists in the web_server hashFirst functionality of Robustel R1510 3.1.16 and 3.3.0. A specially-crafted network request can lead to denial of service. An attacker can send a sequence of requests to trigger this vulnerability.
7.5 High severity
R1510: Out-of-bounds Read
CVE-2022-35261Oct 25, 2022RobustelEPSS 1.19%
A denial of service vulnerability exists in the web_server hashFirst functionality of Robustel R1510 3.1.16 and 3.3.0. A specially-crafted network request can lead to denial of service. An attacker can send a sequence of requests to trigger this vulnerability.
7.2 High severity
R1510: Improper Neutralization of Special Elements used in an OS Command
CVE-2022-34850Oct 25, 2022RobustelEPSS 3.65%
An OS command injection vulnerability exists in the web_server /action/import_authorized_keys/ functionality of Robustel R1510 3.1.16 and 3.3.0. A specially-crafted network request can lead to arbitrary command execution. An attacker can send a sequence of req
9.1 Critical severity
R1510: Improper Limitation of a Pathname to a Restricted Directory
CVE-2022-33897Oct 25, 2022RobustelEPSS 1.63%
A directory traversal vulnerability exists in the web_server /ajax/remove/ functionality of Robustel R1510 3.1.16. A specially-crafted network request can lead to arbitrary file deletion. An attacker can send a sequence of requests to trigger this vulnerabilit
9.8 Critical severity
R1510: Improper Neutralization of Special Elements used in an OS Command
CVE-2022-33150Oct 25, 2022RobustelEPSS 3.87%
An OS command injection vulnerability exists in the js_package install functionality of Robustel R1510 3.1.16. A specially-crafted network request can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger this vulnerabilit
9.8 Critical severity
R1510: Improper Neutralization of Special Elements used in an OS Command
CVE-2022-32765Oct 25, 2022RobustelEPSS 3.73%
An OS command injection vulnerability exists in the sysupgrade command injection functionality of Robustel R1510 3.1.16 and 3.3.0. A specially-crafted network request can lead to arbitrary command execution. An attacker can send a sequence of requests to trigg
9.8 Critical severity
R1510: Improper Neutralization of Special Elements used in an OS Command
CVE-2022-33329Jun 30, 2022RobustelEPSS 4.34%
Multiple command injection vulnerabilities exist in the web_server ajax endpoints functionalities of Robustel R1510 3.3.0. A specially-crafted network packets can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these
9.8 Critical severity
R1510: Improper Neutralization of Special Elements used in an OS Command
CVE-2022-33328Jun 30, 2022RobustelEPSS 4.34%
Multiple command injection vulnerabilities exist in the web_server ajax endpoints functionalities of Robustel R1510 3.3.0. A specially-crafted network packets can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these
9.8 Critical severity
R1510: Improper Neutralization of Special Elements used in an OS Command
CVE-2022-33327Jun 30, 2022RobustelEPSS 4.34%
Multiple command injection vulnerabilities exist in the web_server ajax endpoints functionalities of Robustel R1510 3.3.0. A specially-crafted network packets can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these
9.8 Critical severity
R1510: Improper Neutralization of Special Elements used in an OS Command
CVE-2022-33326Jun 30, 2022RobustelEPSS 4.34%
Multiple command injection vulnerabilities exist in the web_server ajax endpoints functionalities of Robustel R1510 3.3.0. A specially-crafted network packets can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these
9.8 Critical severity
R1510: Improper Neutralization of Special Elements used in an OS Command
CVE-2022-33325Jun 30, 2022RobustelEPSS 4.34%
Multiple command injection vulnerabilities exist in the web_server ajax endpoints functionalities of Robustel R1510 3.3.0. A specially-crafted network packets can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these
9.8 Critical severity
R1510: Improper Neutralization of Special Elements used in an OS Command
CVE-2022-33314Jun 30, 2022RobustelEPSS 4.34%
Multiple command injection vulnerabilities exist in the web_server action endpoints functionalities of Robustel R1510 3.3.0. A specially-crafted network request can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger the
9.8 Critical severity
R1510: Improper Neutralization of Special Elements used in an OS Command
CVE-2022-33313Jun 30, 2022RobustelEPSS 4.34%
Multiple command injection vulnerabilities exist in the web_server action endpoints functionalities of Robustel R1510 3.3.0. A specially-crafted network request can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger the
9.8 Critical severity
R1510: Improper Neutralization of Special Elements used in an OS Command
CVE-2022-33312Jun 30, 2022RobustelEPSS 4.34%
Multiple command injection vulnerabilities exist in the web_server action endpoints functionalities of Robustel R1510 3.3.0. A specially-crafted network request can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger the
9.8 Critical severity
R1510: Active Debug Code
CVE-2022-32585Jun 30, 2022RobustelEPSS 3.02%
A command execution vulnerability exists in the clish art2 functionality of Robustel R1510 3.3.0. A specially-crafted network request can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger this vulnerability.
9.1 Critical severity
R1510: Improper Limitation of a Pathname to a Restricted Directory
CVE-2022-28127Jun 30, 2022RobustelEPSS 37.9%
A data removal vulnerability exists in the web_server /action/remove/ API functionality of Robustel R1510 3.3.0. A specially-crafted network request can lead to arbitrary file deletion. An attacker can send a sequence of requests to trigger this vulnerability.