CyberSecBulletin

Siretta vulnerabilities

We track 62 vulnerabilities in Siretta products across 2 products. 62 are rated high or critical, and none are known to be exploited. The most recent was published on January 30, 2023.

62vulnerabilities
43critical
19high
0exploited
9.2average CVSS score

Latest Siretta vulnerabilities

  • 9.8 Critical severity

    QUARTZ-GOLD: Buffer Copy without Checking Size of Input

    CVE-2022-40997SirettaEPSS 1.45%

    Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence

  • 9.8 Critical severity

    QUARTZ-GOLD: Buffer Copy without Checking Size of Input

    CVE-2022-40996SirettaEPSS 1.45%

    Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence

  • 9.8 Critical severity

    QUARTZ-GOLD: Buffer Copy without Checking Size of Input

    CVE-2022-40995SirettaEPSS 1.45%

    Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence

  • 9.8 Critical severity

    QUARTZ-GOLD: Buffer Copy without Checking Size of Input

    CVE-2022-40994SirettaEPSS 1.45%

    Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence

  • 9.8 Critical severity

    QUARTZ-GOLD: Buffer Copy without Checking Size of Input

    CVE-2022-40993SirettaEPSS 1.45%

    Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence

  • 9.8 Critical severity

    QUARTZ-GOLD: Buffer Copy without Checking Size of Input

    CVE-2022-40992SirettaEPSS 1.45%

    Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence

  • 9.8 Critical severity

    QUARTZ-GOLD: Buffer Copy without Checking Size of Input

    CVE-2022-40991SirettaEPSS 1.45%

    Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence

  • 9.8 Critical severity

    QUARTZ-GOLD: Buffer Copy without Checking Size of Input

    CVE-2022-40990SirettaEPSS 1.5%

    Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence

  • 9.8 Critical severity

    QUARTZ-GOLD: Buffer Copy without Checking Size of Input

    CVE-2022-40989SirettaEPSS 1.45%

    Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence

  • 9.8 Critical severity

    QUARTZ-GOLD: Buffer Copy without Checking Size of Input

    CVE-2022-40988SirettaEPSS 1.45%

    Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence

  • 9.8 Critical severity

    QUARTZ-GOLD: Buffer Copy without Checking Size of Input

    CVE-2022-40987SirettaEPSS 1.45%

    Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence

  • 9.8 Critical severity

    QUARTZ-GOLD: Buffer Copy without Checking Size of Input

    CVE-2022-40986SirettaEPSS 1.5%

    Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence

  • 9.8 Critical severity

    QUARTZ-GOLD: Buffer Copy without Checking Size of Input

    CVE-2022-40985SirettaEPSS 1.7%

    Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence

  • 8.8 High severity

    QUARTZ-GOLD: Improper Neutralization of Special Elements used in an OS Command

    CVE-2022-40969SirettaEPSS 6%

    An os command injection vulnerability exists in the httpd delfile.cgi functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted HTTP request can lead to arbitrary command execution. An attacker can send an HTTP request to trigger this vu

  • 8.1 High severity

    QUARTZ-GOLD: Improper Limitation of a Pathname to a Restricted Directory

    CVE-2022-40701SirettaEPSS 2.58%

    A directory traversal vulnerability exists in the httpd delfile.cgi functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted HTTP request can lead to arbitrary file deletion. An attacker can send an HTTP request to trigger this vulnerab

  • 9.8 Critical severity

    QUARTZ-GOLD: Improper Neutralization of Special Elements used in an OS Command

    CVE-2022-40222SirettaEPSS 4.44%

    An OS command injection vulnerability exists in the m2m DELETE_FILE cmd functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network request can lead to arbitrary command execution. An attacker can send a network request to trigger

  • 8.8 High severity

    QUARTZ-GOLD: Improper Neutralization of Special Elements used in an OS Command

    CVE-2022-40220SirettaEPSS 4.19%

    An OS command injection vulnerability exists in the httpd txt/restore.cgi functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network request can lead to arbitrary command execution. An attacker can send an HTTP request to trigger

  • 8.8 High severity

    QUARTZ-GOLD: Improper Limitation of a Pathname to a Restricted Directory

    CVE-2022-39045SirettaEPSS 3.7%

    A file write vulnerability exists in the httpd upload.cgi functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted HTTP request can lead to arbitrary file upload. An attacker can send an HTTP request to trigger this vulnerability.

  • 8.8 High severity

    QUARTZ-GOLD: Active Debug Code

    CVE-2022-38715SirettaEPSS 3.82%

    A leftover debug code vulnerability exists in the httpd shell.cgi functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted HTTP request can lead to remote code execution. An attacker can send an HTTP request to trigger this vulnerabilit

  • 8.8 High severity

    QUARTZ-GOLD: Buffer Copy without Checking Size of Input

    CVE-2022-38459SirettaEPSS 3.99%

    A stack-based buffer overflow vulnerability exists in the httpd downfile.cgi functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted HTTP request can lead to remote code execution. An attacker can send an HTTP request to trigger this v

  • 8.8 High severity

    QUARTZ-GOLD: Improper Neutralization of Special Elements used in an OS Command

    CVE-2022-38066SirettaEPSS 7.32%

    An OS command injection vulnerability exists in the httpd SNMP functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted HTTP response can lead to arbitrary command execution. An attacker can send a network request to trigger this vulner

  • 8.8 High severity

    QUARTZ-GOLD: Buffer Copy without Checking Size of Input

    CVE-2022-36279SirettaEPSS 3.28%

    A stack-based buffer overflow vulnerability exists in the httpd delfile.cgi functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted HTTP request can lead to remote code execution. An attacker can send an HTTP request to trigger this vu