Advisories · Technology
Netcore NR268.
Every CVE that names Netcore NR268 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.3 Medium
Netcore NR268 DHCP Hostname filter_hosts_dump.cgi eval cross site scripting
- Netcore NR268
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.3 Medium
Netcore NR268 DHCP dhcp_dynamicip_show.cgi eval cross site scripting
- Netcore NR268
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.1 Medium
Netcore NR268 DDNS ddns_wan_list_show.cgi ddns_wan_list_show information disclosure
- Netcore NR268
- Information disclosure
- Broken access control
- CVSS 9.4 CriticalCritical · CVSS 9+
Netcore NR268 DDNS DDNSset.cgi execvp argument injection
- Netcore NR268
- Other injection
- Command injection
- CVSS 5.3 Medium
Netcore NR268 CGI Endpoint cross-site request forgery
- Netcore NR268
- Cross-site request forgery (CSRF)
- Broken access control
- CVSS 4.8 Medium
Netcore NR268 Web UI l7_call_board_user_set.cgi eval cross site scripting
- Netcore NR268
- Cross-site scripting (XSS)
- Code injection
- CVSS 10.0 CriticalCritical · CVSS 9+
Netcore NR268 CGI Execution user_ok improper authentication
- Netcore NR268
- Authentication bypass
- CVSS 8.6 High
Netcore NR268 filter_arp_put_file.cgi filter_arp_put_file_cgi out-of-bounds
- Netcore NR268
- Memory corruption
- CVSS 7.2 High
Netcore NR268 1.7.121109 Security Check Bypass in parame_put_file.cgi
- Netcore NR268
- CWE-353
- CVSS 8.7 High
Netcore NR268 1.7.121109 Forgeable Firmware Authenticity Check in mtd_write
- Netcore NR268
- CWE-354