CyberSecBulletin

Siretta vulnerabilities

We track 62 vulnerabilities in Siretta products across 2 products. 62 are rated high or critical, and none are known to be exploited. The most recent was published on January 30, 2023.

62vulnerabilities
43critical
19high
0exploited
9.2average CVSS score

Latest Siretta vulnerabilities

  • 9.8 Critical severity

    FreshTomato: Improper Neutralization of Special Elements used in an OS Command

    CVE-2022-42484FreshTomatoEPSS 6.21%

    An OS command injection vulnerability exists in the httpd logs/view.cgi functionality of FreshTomato 2022.5. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can send an HTTP request to trigger this vulnerability.

  • 7.5 High severity

    FreshTomato: Improper Limitation of a Pathname to a Restricted Directory

    CVE-2022-38451FreshTomatoEPSS 2.13%

    A directory traversal vulnerability exists in the httpd update.cgi functionality of FreshTomato 2022.5. A specially crafted HTTP request can lead to arbitrary file read. An attacker can send an HTTP request to trigger this vulnerability.

  • 9.8 Critical severity

    QUARTZ-GOLD: Improper Neutralization of Special Elements used in an OS Command

    CVE-2022-42493SirettaEPSS 3.55%

    Several OS command injection vulnerabilities exist in the m2m binary of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network request can lead to arbitrary command execution. An attacker can send a network request to trigger these vulnerabili

  • 9.8 Critical severity

    QUARTZ-GOLD: Improper Neutralization of Special Elements used in an OS Command

    CVE-2022-42492SirettaEPSS 3.36%

    Several OS command injection vulnerabilities exist in the m2m binary of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network request can lead to arbitrary command execution. An attacker can send a network request to trigger these vulnerabili

  • 9.8 Critical severity

    QUARTZ-GOLD: Improper Neutralization of Special Elements used in an OS Command

    CVE-2022-42491SirettaEPSS 3.36%

    Several OS command injection vulnerabilities exist in the m2m binary of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network request can lead to arbitrary command execution. An attacker can send a network request to trigger these vulnerabili

  • 9.8 Critical severity

    QUARTZ-GOLD: Improper Neutralization of Special Elements used in an OS Command

    CVE-2022-42490SirettaEPSS 3.52%

    Several OS command injection vulnerabilities exist in the m2m binary of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network request can lead to arbitrary command execution. An attacker can send a network request to trigger these vulnerabili

  • 9.8 Critical severity

    QUARTZ-GOLD: Out-of-bounds Write

    CVE-2022-41991SirettaEPSS 1.47%

    A heap-based buffer overflow vulnerability exists in the m2m DELETE_FILE cmd functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network request can lead to a heap buffer overflow. An attacker can send a network request to trigger

  • 9.8 Critical severity

    QUARTZ-GOLD: Buffer Copy without Checking Size of Input

    CVE-2022-41030SirettaEPSS 2.78%

    Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence

  • 7.2 High severity

    QUARTZ-GOLD: Out-of-bounds Write

    CVE-2022-41029SirettaEPSS 2.3%

    Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence

  • 7.2 High severity

    QUARTZ-GOLD: Out-of-bounds Write

    CVE-2022-41028SirettaEPSS 2.43%

    Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence

  • 7.2 High severity

    QUARTZ-GOLD: Out-of-bounds Write

    CVE-2022-41027SirettaEPSS 2.3%

    Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence

  • 7.2 High severity

    QUARTZ-GOLD: Out-of-bounds Write

    CVE-2022-41026SirettaEPSS 1.74%

    Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence

  • 7.2 High severity

    QUARTZ-GOLD: Out-of-bounds Write

    CVE-2022-41025SirettaEPSS 1.74%

    Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence

  • 7.2 High severity

    QUARTZ-GOLD: Out-of-bounds Write

    CVE-2022-41024SirettaEPSS 1.79%

    Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence

  • 7.2 High severity

    QUARTZ-GOLD: Out-of-bounds Write

    CVE-2022-41023SirettaEPSS 1.74%

    Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence

  • 7.2 High severity

    QUARTZ-GOLD: Out-of-bounds Write

    CVE-2022-41022SirettaEPSS 1.79%

    Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence

  • 7.2 High severity

    QUARTZ-GOLD: Out-of-bounds Write

    CVE-2022-41021SirettaEPSS 1.74%

    Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence

  • 7.2 High severity

    QUARTZ-GOLD: Out-of-bounds Write

    CVE-2022-41020SirettaEPSS 1.74%

    Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence

  • 9.8 Critical severity

    QUARTZ-GOLD: Out-of-bounds Write

    CVE-2022-41019SirettaEPSS 1.74%

    Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence

  • 9.8 Critical severity

    QUARTZ-GOLD: Buffer Copy without Checking Size of Input

    CVE-2022-41018SirettaEPSS 1.88%

    Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence

  • 9.8 Critical severity

    QUARTZ-GOLD: Buffer Copy without Checking Size of Input

    CVE-2022-41017SirettaEPSS 1.88%

    Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence

  • 9.8 Critical severity

    QUARTZ-GOLD: Buffer Copy without Checking Size of Input

    CVE-2022-41016SirettaEPSS 1.74%

    Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence

  • 9.8 Critical severity

    QUARTZ-GOLD: Buffer Copy without Checking Size of Input

    CVE-2022-41015SirettaEPSS 1.74%

    Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence

  • 9.8 Critical severity

    QUARTZ-GOLD: Buffer Copy without Checking Size of Input

    CVE-2022-41014SirettaEPSS 1.74%

    Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence

  • 9.8 Critical severity

    QUARTZ-GOLD: Buffer Copy without Checking Size of Input

    CVE-2022-41013SirettaEPSS 1.74%

    Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence

  • 9.8 Critical severity

    QUARTZ-GOLD: Buffer Copy without Checking Size of Input

    CVE-2022-41012SirettaEPSS 1.82%

    Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence

  • 9.8 Critical severity

    QUARTZ-GOLD: Buffer Copy without Checking Size of Input

    CVE-2022-41011SirettaEPSS 1.74%

    Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence

  • 9.8 Critical severity

    QUARTZ-GOLD: Buffer Copy without Checking Size of Input

    CVE-2022-41010SirettaEPSS 1.74%

    Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence

  • 9.8 Critical severity

    QUARTZ-GOLD: Buffer Copy without Checking Size of Input

    CVE-2022-41009SirettaEPSS 1.74%

    Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence

  • 9.8 Critical severity

    QUARTZ-GOLD: Buffer Copy without Checking Size of Input

    CVE-2022-41008SirettaEPSS 1.79%

    Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence

  • 9.8 Critical severity

    QUARTZ-GOLD: Buffer Copy without Checking Size of Input

    CVE-2022-41007SirettaEPSS 1.74%

    Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence

  • 9.8 Critical severity

    QUARTZ-GOLD: Buffer Copy without Checking Size of Input

    CVE-2022-41006SirettaEPSS 1.74%

    Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence

  • 9.8 Critical severity

    QUARTZ-GOLD: Buffer Copy without Checking Size of Input

    CVE-2022-41005SirettaEPSS 1.74%

    Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence

  • 9.8 Critical severity

    QUARTZ-GOLD: Buffer Copy without Checking Size of Input

    CVE-2022-41004SirettaEPSS 1.74%

    Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence

  • 9.8 Critical severity

    QUARTZ-GOLD: Buffer Copy without Checking Size of Input

    CVE-2022-41003SirettaEPSS 1.81%

    Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence

  • 9.8 Critical severity

    QUARTZ-GOLD: Buffer Copy without Checking Size of Input

    CVE-2022-41002SirettaEPSS 1.74%

    Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence

  • 9.8 Critical severity

    QUARTZ-GOLD: Buffer Copy without Checking Size of Input

    CVE-2022-41001SirettaEPSS 1.74%

    Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence

  • 9.8 Critical severity

    QUARTZ-GOLD: Buffer Copy without Checking Size of Input

    CVE-2022-41000SirettaEPSS 1.74%

    Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence

  • 9.8 Critical severity

    QUARTZ-GOLD: Buffer Copy without Checking Size of Input

    CVE-2022-40999SirettaEPSS 1.45%

    Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence

  • 9.8 Critical severity

    QUARTZ-GOLD: Buffer Copy without Checking Size of Input

    CVE-2022-40998SirettaEPSS 1.5%

    Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence