Advisories · Technology
Oray Pugongying X5 Pro.
Every CVE that names Oray Pugongying X5 Pro among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 9.4 CriticalCritical · CVSS 9+
Oray Pugongying X5 Pro openwrt_release config_restore_ex path traversal
- Oray Pugongying X5 Pro
- Path traversal
- CVSS 9.4 CriticalCritical · CVSS 9+
Oray Pugongying X5 Pro API Authorization run_async_task improper authorization
- Oray Pugongying X5 Pro
- Privilege escalation
- Broken access control
- CVSS 2.3 Low
Oray Pugongying X5 Pro Session ID session.lua session_get random values
- Oray Pugongying X5 Pro
- Weak cryptography or TLS
- CWE-310
- CVSS 9.3 CriticalCritical · CVSS 9+
Oray Pugongying X5 Pro Dnsmasq crlf injection
- Oray Pugongying X5 Pro
- Other injection
- CVSS 8.6 High
Oray Pugongying X5 Pro PPPoE WAN Setting upload_files plugin_init unrestricted upload
- Oray Pugongying X5 Pro
- Broken access control
- Unrestricted file upload
- CVSS 9.4 CriticalCritical · CVSS 9+
Oray Pugongying X5 Pro L2TP Authentication crlf injection
- Oray Pugongying X5 Pro
- Other injection
- CVSS 9.4 CriticalCritical · CVSS 9+
Oray Pugongying X5 Pro IPsec Policy ipsec.conf crlf injection
- Oray Pugongying X5 Pro
- Other injection
- CVSS 9.4 CriticalCritical · CVSS 9+
Oray Pugongying X5 Pro Dnsmasq crlf injection
- Oray Pugongying X5 Pro
- Other injection
- CVSS 9.4 CriticalCritical · CVSS 9+
Oray Pugongying X5 Pro SNMP snmp_set crlf injection
- Oray Pugongying X5 Pro
- Other injection
- CVSS 9.4 CriticalCritical · CVSS 9+
Oray Pugongying X5 Pro Ser2net crlf injection
- Oray Pugongying X5 Pro
- Other injection