Enh1350Ext Firmware
Approved changes feed: RSS · Atom
cpe:2.3:o:engeniustech:enh1350ext_firmware:*:*:*:*:*:*:*:*
part: o version: * update: *
| Vendor | Engeniustech (e5932356-76b0-5cb7-b9ff-f7b3515c8a1a) |
|---|---|
| Product | Enh1350Ext Firmware (0f442130-3971-547e-943c-4f229861292b) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-45242 |
vulnerable | 2026-06-08 06:45:55.632734 |
Details available
EnGenius ENH1350EXT A8J-ENH1350EXT devices through 3.9.3.2_c1.9.51 allow (blind) OS Command Injection via shell metacharacters to the Ping or Speed Test utility. During the time of initial setup, the device creates an open unsecured network whose admin panel is configured with the default credentials of admin/admin. An unauthorized attacker in proximity to the Wi-Fi network can exploit this window of time to execute arbitrary OS commands with root-level permissions.
Published: 2024-10-24T00:00:00.000Z
Updated: 2024-10-28T19:10:46.922Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-11659 |
vulnerable | 2026-06-08 06:23:50.096340 |
EnGenius ENH1350EXT/ENS500-AC/ENS620EXT diag_iperf command injection
MEDIUM (4.7)
A vulnerability was found in EnGenius ENH1350EXT, ENS500-AC and ENS620EXT up to 20241118 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/network/diag_iperf. The manipulation of the argument iperf leads to command injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-11-25T06:31:24.416Z
Updated: 2024-11-25T21:02:10.204Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-11658 |
vulnerable | 2026-06-08 06:23:50.094490 |
EnGenius ENH1350EXT/ENS500-AC/ENS620EXT ajax_getChannelList command injection
MEDIUM (4.7)
A vulnerability has been found in EnGenius ENH1350EXT, ENS500-AC and ENS620EXT up to 20241118 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/network/ajax_getChannelList. The manipulation of the argument countryCode leads to command injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-11-25T06:00:26.332Z
Updated: 2024-11-26T15:51:23.057Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-11657 |
vulnerable | 2026-06-08 06:23:50.093713 |
EnGenius ENH1350EXT/ENS500-AC/ENS620EXT diag_nslookup command injection
MEDIUM (4.7)
A vulnerability, which was classified as critical, was found in EnGenius ENH1350EXT, ENS500-AC and ENS620EXT up to 20241118. Affected is an unknown function of the file /admin/network/diag_nslookup. The manipulation of the argument diag_nslookup leads to command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-11-25T05:31:25.482Z
Updated: 2024-11-26T15:25:02.758Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-11656 |
vulnerable | 2026-06-08 06:23:50.092363 |
EnGenius ENH1350EXT/ENS500-AC/ENS620EXT diag_ping6 command injection
MEDIUM (4.7)
A vulnerability, which was classified as critical, has been found in EnGenius ENH1350EXT, ENS500-AC and ENS620EXT up to 20241118. This issue affects some unknown processing of the file /admin/network/diag_ping6. The manipulation of the argument diag_ping6 leads to command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-11-25T05:00:28.655Z
Updated: 2024-11-26T15:45:02.709Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-11655 |
vulnerable | 2026-06-08 06:23:50.090835 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-11654 |
vulnerable | 2026-06-08 06:23:50.088861 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-11653 |
vulnerable | 2026-06-08 06:23:50.087490 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-11652 |
vulnerable | 2026-06-08 06:23:50.082035 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-11651 |
vulnerable | 2026-06-08 06:23:50.073038 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.