D1G17

2 exploits Active since Feb 2023

CVE-2023-26602 NOMISEC CRITICAL STUB

ASUS ASMB8 iKVM <1.14.51 - RCE

ASUS ASMB8 iKVM firmware through 1.14.51 allows remote attackers to execute arbitrary code by using SNMP to create extensions, as demonstrated by snmpset for NET-SNMP-EXTEND-MIB with /bin/sh for command execution.

CVSS 9.8

View Code

CVE-2023-26609 NOMISEC HIGH STUB

ABUS TVIP - RCE

ABUS TVIP 20000-21150 devices allows remote attackers to execute arbitrary code via shell metacharacters in the /cgi-bin/mft/wireless_mft ap field.

CVSS 7.2

View Code