Approved changes feed: RSS · Atom

cpe:2.3:h:mitrastar:gpt-2541gnac:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorMitrastar (3f1de080-df69-5992-9895-f6eecd4ec3a8)
ProductGpt 2541Gnac (08b5df46-f83a-50c4-85eb-e8f3c0d3b24f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-9977 vulnerable 2026-06-08 07:00:28.994612 MitraStar GPT-2541GNAC Firewall Settings Page settings-firewall.cgi os command injection
MEDIUM (4.7)
A vulnerability, which was classified as critical, was found in MitraStar GPT-2541GNAC BR_g5.6_1.11(WVK.0)b26. Affected is an unknown function of the file /cgi-bin/settings-firewall.cgi of the component Firewall Settings Page. The manipulation of the argument SrcInterface leads to os command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. We tried to contact the vendor early about the disclosure but the official mail address was not working properly.
Published: 2024-10-15T12:31:04.419Z
Updated: 2024-10-15T13:27:02.177Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-16523 not_vulnerable 2026-06-08 05:09:00.458384 Details available
MitraStar GPT-2541GNAC (HGU) 1.00(VNJ0)b1 and DSL-100HN-T1 ES_113WJY0b16 devices have a zyad1234 password for the zyad1234 account, which is equivalent to root and undocumented.
Published: 2017-11-03T17:00:00.000Z
Updated: 2024-08-05T20:27:04.030Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-16522 not_vulnerable 2026-06-08 05:09:00.456939 Details available
MitraStar GPT-2541GNAC (HGU) 1.00(VNJ0)b1 and DSL-100HN-T1 ES_113WJY0b16 devices allow remote authenticated users to obtain root access by specifying /bin/sh as the command to execute.
Published: 2017-11-03T17:00:00.000Z
Updated: 2024-09-17T00:21:14.775Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.