Quartz-gold Firmware vulnerabilities

62 known vulnerabilities in Quartz-gold Firmware from Siretta. 62 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  FreshTomato: Improper Neutralization of Special Elements used in an OS Command

  CVE-2022-42484Jan 30, 2023FreshTomatoEPSS 6.21%

  An OS command injection vulnerability exists in the httpd logs/view.cgi functionality of FreshTomato 2022.5. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can send an HTTP request to trigger this vulnerability.

• 7.5 High severity

  FreshTomato: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2022-38451Jan 30, 2023FreshTomatoEPSS 2.13%

  A directory traversal vulnerability exists in the httpd update.cgi functionality of FreshTomato 2022.5. A specially crafted HTTP request can lead to arbitrary file read. An attacker can send an HTTP request to trigger this vulnerability.

• 9.8 Critical severity

  QUARTZ-GOLD: Improper Neutralization of Special Elements used in an OS Command

  CVE-2022-42493Jan 26, 2023SirettaEPSS 3.55%

  Several OS command injection vulnerabilities exist in the m2m binary of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network request can lead to arbitrary command execution. An attacker can send a network request to trigger these vulnerabili

• 9.8 Critical severity

  QUARTZ-GOLD: Improper Neutralization of Special Elements used in an OS Command

  CVE-2022-42492Jan 26, 2023SirettaEPSS 3.36%

  Several OS command injection vulnerabilities exist in the m2m binary of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network request can lead to arbitrary command execution. An attacker can send a network request to trigger these vulnerabili

• 9.8 Critical severity

  QUARTZ-GOLD: Improper Neutralization of Special Elements used in an OS Command

  CVE-2022-42491Jan 26, 2023SirettaEPSS 3.36%

  Several OS command injection vulnerabilities exist in the m2m binary of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network request can lead to arbitrary command execution. An attacker can send a network request to trigger these vulnerabili

• 9.8 Critical severity

  QUARTZ-GOLD: Improper Neutralization of Special Elements used in an OS Command

  CVE-2022-42490Jan 26, 2023SirettaEPSS 3.52%

  Several OS command injection vulnerabilities exist in the m2m binary of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network request can lead to arbitrary command execution. An attacker can send a network request to trigger these vulnerabili

• 9.8 Critical severity

  QUARTZ-GOLD: Out-of-bounds Write

  CVE-2022-41991Jan 26, 2023SirettaEPSS 1.47%

  A heap-based buffer overflow vulnerability exists in the m2m DELETE_FILE cmd functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network request can lead to a heap buffer overflow. An attacker can send a network request to trigger

• 9.8 Critical severity

  QUARTZ-GOLD: Buffer Copy without Checking Size of Input

  CVE-2022-41030Jan 26, 2023SirettaEPSS 2.78%

  Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence

• 7.2 High severity

  QUARTZ-GOLD: Out-of-bounds Write

  CVE-2022-41029Jan 26, 2023SirettaEPSS 2.3%

  Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence

• 7.2 High severity

  QUARTZ-GOLD: Out-of-bounds Write

  CVE-2022-41028Jan 26, 2023SirettaEPSS 2.43%

  Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence

• 7.2 High severity

  QUARTZ-GOLD: Out-of-bounds Write

  CVE-2022-41027Jan 26, 2023SirettaEPSS 2.3%

  Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence

• 7.2 High severity

  QUARTZ-GOLD: Out-of-bounds Write

  CVE-2022-41026Jan 26, 2023SirettaEPSS 1.74%

  Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence

• 7.2 High severity

  QUARTZ-GOLD: Out-of-bounds Write

  CVE-2022-41025Jan 26, 2023SirettaEPSS 1.74%

  Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence

• 7.2 High severity

  QUARTZ-GOLD: Out-of-bounds Write

  CVE-2022-41024Jan 26, 2023SirettaEPSS 1.79%

  Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence

• 7.2 High severity

  QUARTZ-GOLD: Out-of-bounds Write

  CVE-2022-41023Jan 26, 2023SirettaEPSS 1.74%

  Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence

• 7.2 High severity

  QUARTZ-GOLD: Out-of-bounds Write

  CVE-2022-41022Jan 26, 2023SirettaEPSS 1.79%

  Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence

• 7.2 High severity

  QUARTZ-GOLD: Out-of-bounds Write

  CVE-2022-41021Jan 26, 2023SirettaEPSS 1.74%

  Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence

• 7.2 High severity

  QUARTZ-GOLD: Out-of-bounds Write

  CVE-2022-41020Jan 26, 2023SirettaEPSS 1.74%

  Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence

• 9.8 Critical severity

  QUARTZ-GOLD: Out-of-bounds Write

  CVE-2022-41019Jan 26, 2023SirettaEPSS 1.74%

  Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence

• 9.8 Critical severity

  QUARTZ-GOLD: Buffer Copy without Checking Size of Input

  CVE-2022-41018Jan 26, 2023SirettaEPSS 1.88%

  Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence

• 9.8 Critical severity

  QUARTZ-GOLD: Buffer Copy without Checking Size of Input

  CVE-2022-41017Jan 26, 2023SirettaEPSS 1.88%

  Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence

• 9.8 Critical severity

  QUARTZ-GOLD: Buffer Copy without Checking Size of Input

  CVE-2022-41016Jan 26, 2023SirettaEPSS 1.74%

  Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence

• 9.8 Critical severity

  QUARTZ-GOLD: Buffer Copy without Checking Size of Input

  CVE-2022-41015Jan 26, 2023SirettaEPSS 1.74%

  Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence

• 9.8 Critical severity

  QUARTZ-GOLD: Buffer Copy without Checking Size of Input

  CVE-2022-41014Jan 26, 2023SirettaEPSS 1.74%

  Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence

• 9.8 Critical severity

  QUARTZ-GOLD: Buffer Copy without Checking Size of Input

  CVE-2022-41013Jan 26, 2023SirettaEPSS 1.74%

  Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence

• 9.8 Critical severity

  QUARTZ-GOLD: Buffer Copy without Checking Size of Input

  CVE-2022-41012Jan 26, 2023SirettaEPSS 1.82%

  Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence

• 9.8 Critical severity

  QUARTZ-GOLD: Buffer Copy without Checking Size of Input

  CVE-2022-41011Jan 26, 2023SirettaEPSS 1.74%

  Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence

• 9.8 Critical severity

  QUARTZ-GOLD: Buffer Copy without Checking Size of Input

  CVE-2022-41010Jan 26, 2023SirettaEPSS 1.74%

  Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence

• 9.8 Critical severity

  QUARTZ-GOLD: Buffer Copy without Checking Size of Input

  CVE-2022-41009Jan 26, 2023SirettaEPSS 1.74%

  Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence

• 9.8 Critical severity

  QUARTZ-GOLD: Buffer Copy without Checking Size of Input

  CVE-2022-41008Jan 26, 2023SirettaEPSS 1.79%

  Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence

• 9.8 Critical severity

  QUARTZ-GOLD: Buffer Copy without Checking Size of Input

  CVE-2022-41007Jan 26, 2023SirettaEPSS 1.74%

  Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence

• 9.8 Critical severity

  QUARTZ-GOLD: Buffer Copy without Checking Size of Input

  CVE-2022-41006Jan 26, 2023SirettaEPSS 1.74%

  Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence

• 9.8 Critical severity

  QUARTZ-GOLD: Buffer Copy without Checking Size of Input

  CVE-2022-41005Jan 26, 2023SirettaEPSS 1.74%

  Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence

• 9.8 Critical severity

  QUARTZ-GOLD: Buffer Copy without Checking Size of Input

  CVE-2022-41004Jan 26, 2023SirettaEPSS 1.74%

  Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence

• 9.8 Critical severity

  QUARTZ-GOLD: Buffer Copy without Checking Size of Input

  CVE-2022-41003Jan 26, 2023SirettaEPSS 1.81%

  Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence

• 9.8 Critical severity

  QUARTZ-GOLD: Buffer Copy without Checking Size of Input

  CVE-2022-41002Jan 26, 2023SirettaEPSS 1.74%

  Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence

• 9.8 Critical severity

  QUARTZ-GOLD: Buffer Copy without Checking Size of Input

  CVE-2022-41001Jan 26, 2023SirettaEPSS 1.74%

  Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence

• 9.8 Critical severity

  QUARTZ-GOLD: Buffer Copy without Checking Size of Input

  CVE-2022-41000Jan 26, 2023SirettaEPSS 1.74%

  Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence

• 9.8 Critical severity

  QUARTZ-GOLD: Buffer Copy without Checking Size of Input

  CVE-2022-40999Jan 26, 2023SirettaEPSS 1.45%

  Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence

• 9.8 Critical severity

  QUARTZ-GOLD: Buffer Copy without Checking Size of Input

  CVE-2022-40998Jan 26, 2023SirettaEPSS 1.5%

  Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence