Vilo 5 Firmware vulnerabilities
3 known vulnerabilities in Vilo 5 Firmware from Viloliving. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 9.1 Critical severity
vilo_5_mesh_wifi_system_firmware: Improper Neutralization of Special Elements used in a Command
A Command Injection vulnerability in Vilo 5 Mesh WiFi System <= 5.16.1.33 allows remote, authenticated attackers to execute arbitrary code by injecting shell commands into the name of the Vilo device.
- 9.6 Critical severity
vilo_5_mesh_wifi_system_firmware: Missing Authentication for Critical Functionality
Vilo 5 Mesh WiFi System <= 5.16.1.33 is vulnerable to Insecure Permissions. Lack of authentication in the custom TCP service on port 5432 allows remote, unauthenticated attackers to gain administrative access over the router.
- 9.6 Critical severity
vilo_5_mesh_wifi_system_firmware: Buffer Copy without Checking Size of Input
A Buffer Overflow in the Boa webserver of Vilo 5 Mesh WiFi System <= 5.16.1.33 allows remote, unauthenticated attackers to execute arbitrary code via exceptionally long HTTP methods or paths.