systrome Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/systrome/ Sun, 26 Feb 2023 06:48:12 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png systrome Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/systrome/ 32 32 CVE-2018-19525 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-19525/ Sun, 26 Feb 2023 06:48:12 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-19525/ An issue was discovered on Systrome ISG-600C, ISG-600H, and ISG-800W 1.1-R2.1_TRUNK-20180914.bin devices. There is CSRF via /ui/?g=obj_keywords_add and /ui/?g=obj_keywords_addsave with resultant XSS because of a lack of csrf token validation.

The post CVE-2018-19525 appeared first on CVE Vulnerability.

]]> An issue was discovered on Systrome ISG-600C, ISG-600H, and ISG-800W 1.1-R2.1_TRUNK-20180914.bin devices. There is CSRF via /ui/?g=obj_keywords_add and /ui/?g=obj_keywords_addsave with resultant XSS because of a lack of csrf token validation.

The post CVE-2018-19525 appeared first on CVE Vulnerability.

]]> CVE-2019-7383 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-7383/ Sun, 26 Feb 2023 06:34:16 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-7383/ An issue was discovered on Systrome Cumilon ISG-600C, ISG-600H, and ISG-800W devices with firmware V1.1-R2.1_TRUNK-20181105.bin. A shell command injection occurs by editing the description of an ISP file. The file network/isp/isp_update_edit.php does not properly validate user input, which leads to shell command injection via the des parameter.

The post CVE-2019-7383 appeared first on CVE Vulnerability.

]]> An issue was discovered on Systrome Cumilon ISG-600C, ISG-600H, and ISG-800W devices with firmware V1.1-R2.1_TRUNK-20181105.bin. A shell command injection occurs by editing the description of an ISP file. The file network/isp/isp_update_edit.php does not properly validate user input, which leads to shell command injection via the des parameter.

The post CVE-2019-7383 appeared first on CVE Vulnerability.

]]> CVE-2019-7387 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-7387/ Sun, 26 Feb 2023 06:34:16 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-7387/ A local file inclusion vulnerability exists in the web interface of Systrome Cumilon ISG-600C, ISG-600H, and ISG-800W 1.1-R2.1_TRUNK-20180914.bin devices. When the export function is called from system/maintenance/export.php, it accepts the path provided by the user, leading to path traversal via the name parameter.

The post CVE-2019-7387 appeared first on CVE Vulnerability.

]]> A local file inclusion vulnerability exists in the web interface of Systrome Cumilon ISG-600C, ISG-600H, and ISG-800W 1.1-R2.1_TRUNK-20180914.bin devices. When the export function is called from system/maintenance/export.php, it accepts the path provided by the user, leading to path traversal via the name parameter.

The post CVE-2019-7387 appeared first on CVE Vulnerability.

]]>