GCVE - cpe:2.3:h:engeniustech:enh1350ext:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:engeniustech:enh1350ext:-:*:*:*:*:*:*:*

part: h version: - update: *

Vendor	Engeniustech (`e5932356-76b0-5cb7-b9ff-f7b3515c8a1a`)
Product	Enh1350Ext (`ce422925-2d9c-5a31-8a76-be1158f6cd0f`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-11659`	not_vulnerable	2026-06-08 06:23:50.096360	EnGenius ENH1350EXT/ENS500-AC/ENS620EXT diag_iperf command injection MEDIUM (4.7) A vulnerability was found in EnGenius ENH1350EXT, ENS500-AC and ENS620EXT up to 20241118 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/network/diag_iperf. The manipulation of the argument iperf leads to command injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Published: 2024-11-25T06:31:24.416Z Updated: 2024-11-25T21:02:10.204Z Open on db.gcve.eu Reference links https://vuldb.com/?id.285980 https://vuldb.com/?ctiid.285980 https://vuldb.com/?submit.446642 https://k9u7kv33ub.feishu.cn/wiki/OhR6w0THjiFeV1kSfZncaCxTn7f?from=from_copylink	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-11658`	not_vulnerable	2026-06-08 06:23:50.095164	EnGenius ENH1350EXT/ENS500-AC/ENS620EXT ajax_getChannelList command injection MEDIUM (4.7) A vulnerability has been found in EnGenius ENH1350EXT, ENS500-AC and ENS620EXT up to 20241118 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/network/ajax_getChannelList. The manipulation of the argument countryCode leads to command injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Published: 2024-11-25T06:00:26.332Z Updated: 2024-11-26T15:51:23.057Z Open on db.gcve.eu Reference links https://vuldb.com/?id.285979 https://vuldb.com/?ctiid.285979 https://vuldb.com/?submit.446641 https://k9u7kv33ub.feishu.cn/wiki/VyKHwBhydiyeuDkATo9cFZTDnHb	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-11657`	not_vulnerable	2026-06-08 06:23:50.093734	EnGenius ENH1350EXT/ENS500-AC/ENS620EXT diag_nslookup command injection MEDIUM (4.7) A vulnerability, which was classified as critical, was found in EnGenius ENH1350EXT, ENS500-AC and ENS620EXT up to 20241118. Affected is an unknown function of the file /admin/network/diag_nslookup. The manipulation of the argument diag_nslookup leads to command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Published: 2024-11-25T05:31:25.482Z Updated: 2024-11-26T15:25:02.758Z Open on db.gcve.eu Reference links https://vuldb.com/?id.285978 https://vuldb.com/?ctiid.285978 https://vuldb.com/?submit.446640 https://k9u7kv33ub.feishu.cn/wiki/RURswTkepiuKCzkGMd2cA1M2nNc	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-11656`	not_vulnerable	2026-06-08 06:23:50.092385	EnGenius ENH1350EXT/ENS500-AC/ENS620EXT diag_ping6 command injection MEDIUM (4.7) A vulnerability, which was classified as critical, has been found in EnGenius ENH1350EXT, ENS500-AC and ENS620EXT up to 20241118. This issue affects some unknown processing of the file /admin/network/diag_ping6. The manipulation of the argument diag_ping6 leads to command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Published: 2024-11-25T05:00:28.655Z Updated: 2024-11-26T15:45:02.709Z Open on db.gcve.eu Reference links https://vuldb.com/?id.285977 https://vuldb.com/?ctiid.285977 https://vuldb.com/?submit.446639 https://k9u7kv33ub.feishu.cn/wiki/FBJCwjFPZiY4aakElh6cwF25nff	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-11655`	not_vulnerable	2026-06-08 06:23:50.090965	EnGenius ENH1350EXT/ENS500-AC/ENS620EXT diag_pinginterface command injection MEDIUM (4.7) A vulnerability classified as critical was found in EnGenius ENH1350EXT, ENS500-AC and ENS620EXT up to 20241118. This vulnerability affects unknown code of the file /admin/network/diag_pinginterface. The manipulation of the argument diag_ping leads to command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Published: 2024-11-25T04:31:23.693Z Updated: 2024-11-26T15:46:43.301Z Open on db.gcve.eu Reference links https://vuldb.com/?id.285976 https://vuldb.com/?ctiid.285976 https://vuldb.com/?submit.446638 https://k9u7kv33ub.feishu.cn/wiki/PpM6w3TF8ilK3Ek5RLqcLPUrn6c	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-11654`	not_vulnerable	2026-06-08 06:23:50.088880	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-11653`	not_vulnerable	2026-06-08 06:23:50.087513	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-11652`	not_vulnerable	2026-06-08 06:23:50.082343	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-11651`	not_vulnerable	2026-06-08 06:23:50.078645	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.