Approved changes feed: RSS · Atom

cpe:2.3:a:overtek:ot-e801g:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorOvertek (9b2fab7d-5798-5201-aea0-78347fd16366)
ProductOt E801G (8bde57fa-2f9a-5b6b-b048-cf366757358f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-12985 vulnerable 2026-06-08 06:25:36.451707 Overtek OT-E801G passwd os command injection
MEDIUM (6.3)
A vulnerability classified as critical was found in Overtek OT-E801G OTE801G65.1.1.0. This vulnerability affects unknown code of the file /diag_ping.cmd?action=test&interface=ppp0.1&ipaddr=8.8.8.8%26%26cat%20/etc/passwd&ipversion=4&sessionKey=test. The manipulation leads to os command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-12-27T15:00:11.920Z
Updated: 2024-12-27T16:05:42.710Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.