Advisories · Technology
Netcore NR255-V.
Every CVE that names Netcore NR255-V among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.1 Medium
Netcore NR255-V 1.5.130703 Stored Cross-Site Scripting in L7 Content Management via eval() Sinks
- Netcore NR255-V
- Cross-site scripting (XSS)
- CVSS 7.1 High
Netcore NR255-V 1.5.130703 IPsec PSK and RSA Key Disclosure via l2tpd_config_show.cgi Read Handlers
- Netcore NR255-V
- Hard-coded credentials
- CVSS 5.3 Medium
Netcore NR255-V 1.5.130703 Out-of-Bounds Read in filter_arp_put_file.cgi via String API Misuse
- Netcore NR255-V
- Memory corruption
- CVSS 5.1 Medium
Netcore NR255-V 1.5.130703 Stored Cross-Site Scripting via DHCP and ARP Hostname Fields
- Netcore NR255-V
- Cross-site scripting (XSS)
- CVSS 5.1 Medium
Netcore NR255-V 1.5.130703 Stored Cross-Site Scripting via DHCP/ACL Management Pages
- Netcore NR255-V
- Cross-site scripting (XSS)
- CVSS 7.1 High
Netcore NR255-V 1.5.130703 Sensitive Information Disclosure via VPN Read Handlers
- Netcore NR255-V
- Hard-coded credentials
- CVSS 7.1 High
Netcore NR255-V 1.5.130703 Out-of-Bounds Read in mtd_write Firmware Upload Validation
- Netcore NR255-V
- Memory corruption
- CVSS 8.6 High
Netcore NR255-V 1.5.130703 Stack-Based Buffer Overflow in reboot_timer_set.cgi
- Netcore NR255-V
- Memory corruption
- CVSS 6.9 Medium
Netcore NR255-V 1.5.130703 NULL Pointer Dereference in route_policy_add.cgi via Missing exit_port
- Netcore NR255-V
- Memory corruption
- CVSS 5.1 Medium
Netcore NR255-V 1.5.130703 Stored Cross-Site Scripting in Route/NAT Configuration CGI Handlers
- Netcore NR255-V
- Cross-site scripting (XSS)
- CVSS 8.6 High
Netcore NR255-V 1.5.130703 OS Command Argument Injection via Unquoted DDNS Parameters
- Netcore NR255-V
- Command injection
- CVSS 6.9 Medium
Netcore NR255-V 1.5.130703 NULL Pointer Dereference via Unchecked atoi() in QoS Setter Handlers
- Netcore NR255-V
- Memory corruption
- CVSS 4.8 Medium
Netcore NR255-V 1.5.130703 Stored Cross-Site Scripting via Unescaped QoS Rule Names
- Netcore NR255-V
- Cross-site scripting (XSS)
- CVSS 5.3 Medium
Netcore NR255-V 1.5.130703 Sensitive Information Disclosure via QoS Bandwidth Plan Routes
- Netcore NR255-V
- Broken access control
- CVSS 8.7 High
Netcore NR255-V 1.5.130703 OS Command Argument Injection in Nettools tcpdump Launch Paths
- Netcore NR255-V
- Command injection
- CVSS 8.7 High
Netcore NR255-V 1.5.130703 Stack-Based Buffer Overflow in ntools_tcpdump_start_set.cgi
- Netcore NR255-V
- Memory corruption
- CVSS 8.7 High
Netcore NR255-V 1.5.130703 Stack-Based Buffer Overflow in wake_up_set.cgi via MAC and ID Tokenization
- Netcore NR255-V
- Memory corruption
- CVSS 7.1 High
Netcore NR255-V 1.5.130703 Sensitive Information Disclosure via user_pass_show.cgi
- Netcore NR255-V
- Hard-coded credentials
- CVSS 4.8 Medium
Netcore NR255-V 1.5.130703 Stored Cross-Site Scripting via DDNS eval() in ddns_wan_list_show.cgi
- Netcore NR255-V
- Cross-site scripting (XSS)
- CVSS 7.1 High
Netcore NR255-V 1.5.130703 Plaintext DDNS Credential Disclosure via ddns_wan_list_show.cgi
- Netcore NR255-V
- Hard-coded credentials
- CVSS 7.0 High
Netcore NR255-V 1.5.130703 Cross-Site Request Forgery in WAN/LAN Configuration Endpoints
- Netcore NR255-V
- Cross-site request forgery (CSRF)
- CVSS 7.1 High
Netcore NR255-V 1.5.130703 Cross-User Session Disclosure via Audit Endpoints
- Netcore NR255-V
- Information disclosure
- CVSS 7.1 High
Netcore NR255-V 1.5.130703 Sensitive Information Disclosure via l7_web_auth_user_show.cgi
- Netcore NR255-V
- Hard-coded credentials