Description
Multiple OS command injection vulnerabilities affecting Vonets industrial wifi bridge relays and wifi bridge repeaters, software versions 3.3.23.6.9 and prior, enable an authenticated remote attacker to execute arbitrary OS commands via various endpoint parameters.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Vonets VAR1200-H
Default version status: unaffected
0 to ≤ 3.3.23.6.9affected
Vonets VAR1200-L
Default version status: unaffected
0 to ≤ 3.3.23.6.9affected
Vonets VAR600-H
Default version status: unaffected
0 to ≤ 3.3.23.6.9affected
Vonets VAP11AC
Default version status: unaffected
0 to ≤ 3.3.23.6.9affected
Vonets VAP11G-500S
Default version status: unaffected
0 to ≤ 3.3.23.6.9affected
Vonets VBG1200
Default version status: unaffected
0 to ≤ 3.3.23.6.9affected
Vonets VAP11S-5G
Default version status: unaffected
0 to ≤ 3.3.23.6.9affected
Vonets VAP11S
Default version status: unaffected
0 to ≤ 3.3.23.6.9affected
Vonets VAR11N-300
Default version status: unaffected
0 to ≤ 3.3.23.6.9affected
Vonets VAP11G-300
Default version status: unaffected
0 to ≤ 3.3.23.6.9affected
Vonets VAP11N-300
Default version status: unaffected
0 to ≤ 3.3.23.6.9affected
Vonets VAP11G
Default version status: unaffected
0 to ≤ 3.3.23.6.9affected
Vonets VAP11G-500
Default version status: unaffected
0 to ≤ 3.3.23.6.9affected
Vonets VBG1200
Default version status: unaffected
0 to ≤ 3.3.23.6.9affected
Vonets VAP11AC
Default version status: unaffected
0 to ≤ 3.3.23.6.9affected
Vonets VGA-1000
Default version status: unaffected
0 to ≤ 3.3.23.6.9affected