-
TP-LINK TL-R5408M V1.0.4: operation_tools icmp_echo_test Command Injection (Authenticated, Root Command Execution)
-
TP-LINK TL-IPC48DX DUAL V1.0 1.0.5: bin/main NAS Storage Path Command Injection (Post-Auth, Root RCE)
-
TP-LINK TL-IPC43AW Dual-Lens V1.0 1.0.7: bin/main NAS mount_disk Command Injection (Authenticated, Root RCE)
-
Linksys DBC-03 (AX9) V22.03.01.46: httpd stok Session Token Unauthenticated Issuance and Config API Access (Pre-Auth, Config Takeover)
-
TP-Link TL-IR4105-4G V1.0 1.0.5: dms httpCert Wireless Certificate Password OS Command Injection (Authenticated, Root RCE)
-
TP-Link TL-AUD30 V1.0 1.0.6 Build 231207: dsd set_global_config MTU OS Command Injection (Local RPC, Root RCE)
-
Hikvision DS-2CFSP4/4G (Cold Proof) V5.9.20: FirmUpgrade dev_part_mnt OS Command Injection (Firmware Upgrade Channel, Root RCE)
-
Tenda IT7-L(P)RS Camera 2209020908: apollo PUT /PSIA/YG/system/time timeZone OS Command Injection (Authenticated, Root RCE)
-
Xiaomi Router BE6500 (RD08) 1.1.96: LuCI setWifiAutoApMode API OS Command Injection (Authenticated, Root RCE)
-
Tenda O1 V1.0.0.7(10648): goform setPingInfo OS Command Injection (Authenticated, Root RCE)