Approved changes feed: RSS · Atom

cpe:2.3:o:engeniustech:ens500-ac_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorEngeniustech (e5932356-76b0-5cb7-b9ff-f7b3515c8a1a)
ProductEns500 Ac Firmware (ad1586b0-9d12-58fd-9b09-707b8426d604)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-11659 vulnerable 2026-06-08 06:23:50.096470 EnGenius ENH1350EXT/ENS500-AC/ENS620EXT diag_iperf command injection
MEDIUM (4.7)
A vulnerability was found in EnGenius ENH1350EXT, ENS500-AC and ENS620EXT up to 20241118 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/network/diag_iperf. The manipulation of the argument iperf leads to command injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-11-25T06:31:24.416Z
Updated: 2024-11-25T21:02:10.204Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-11658 vulnerable 2026-06-08 06:23:50.094523 EnGenius ENH1350EXT/ENS500-AC/ENS620EXT ajax_getChannelList command injection
MEDIUM (4.7)
A vulnerability has been found in EnGenius ENH1350EXT, ENS500-AC and ENS620EXT up to 20241118 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/network/ajax_getChannelList. The manipulation of the argument countryCode leads to command injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-11-25T06:00:26.332Z
Updated: 2024-11-26T15:51:23.057Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-11657 vulnerable 2026-06-08 06:23:50.093844 EnGenius ENH1350EXT/ENS500-AC/ENS620EXT diag_nslookup command injection
MEDIUM (4.7)
A vulnerability, which was classified as critical, was found in EnGenius ENH1350EXT, ENS500-AC and ENS620EXT up to 20241118. Affected is an unknown function of the file /admin/network/diag_nslookup. The manipulation of the argument diag_nslookup leads to command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-11-25T05:31:25.482Z
Updated: 2024-11-26T15:25:02.758Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-11656 vulnerable 2026-06-08 06:23:50.092511 EnGenius ENH1350EXT/ENS500-AC/ENS620EXT diag_ping6 command injection
MEDIUM (4.7)
A vulnerability, which was classified as critical, has been found in EnGenius ENH1350EXT, ENS500-AC and ENS620EXT up to 20241118. This issue affects some unknown processing of the file /admin/network/diag_ping6. The manipulation of the argument diag_ping6 leads to command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-11-25T05:00:28.655Z
Updated: 2024-11-26T15:45:02.709Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-11655 vulnerable 2026-06-08 06:23:50.091077 EnGenius ENH1350EXT/ENS500-AC/ENS620EXT diag_pinginterface command injection
MEDIUM (4.7)
A vulnerability classified as critical was found in EnGenius ENH1350EXT, ENS500-AC and ENS620EXT up to 20241118. This vulnerability affects unknown code of the file /admin/network/diag_pinginterface. The manipulation of the argument diag_ping leads to command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-11-25T04:31:23.693Z
Updated: 2024-11-26T15:46:43.301Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-11654 vulnerable 2026-06-08 06:23:50.089012 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-11653 vulnerable 2026-06-08 06:23:50.087533 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-11652 vulnerable 2026-06-08 06:23:50.082088 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-11651 vulnerable 2026-06-08 06:23:50.073848 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.