Vulnerabilities > IP COM > M50 Firmware > Critical

DATE CVE VULNERABILITY TITLE RISK
2022-12-23 CVE-2022-45721 Classic Buffer Overflow vulnerability in Ip-Com M50 Firmware 15.11.0.33
IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the picName parameter in the formDelWewifiPic function.
network
low complexity
ip-com CWE-120
critical
9.8
2022-12-23 CVE-2022-45720 Classic Buffer Overflow vulnerability in Ip-Com M50 Firmware 15.11.0.33
IP-COM M50 V15.11.0.33(10768) was discovered to contain multiple buffer overflows via the ip, mac, and remark parameters in the formIPMacBindModify function.
network
low complexity
ip-com CWE-120
critical
9.8
2022-12-23 CVE-2022-45719 Classic Buffer Overflow vulnerability in Ip-Com M50 Firmware 15.11.0.33
IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the gotoUrl parameter in the formPortalAuth function.
network
low complexity
ip-com CWE-120
critical
9.8
2022-12-23 CVE-2022-45718 Classic Buffer Overflow vulnerability in Ip-Com M50 Firmware 15.11.0.33
IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the rules parameter in the formIPMacBindAdd function.
network
low complexity
ip-com CWE-120
critical
9.8
2022-12-23 CVE-2022-45717 OS Command Injection vulnerability in Ip-Com M50 Firmware 15.11.0.33
IP-COM M50 V15.11.0.33(10768) was discovered to contain a command injection vulnerability via the usbPartitionName parameter in the formSetUSBPartitionUmount function.
network
low complexity
ip-com CWE-78
critical
9.8
2022-12-23 CVE-2022-45716 Classic Buffer Overflow vulnerability in Ip-Com M50 Firmware 15.11.0.33
IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the indexSet parameter in the formIPMacBindDel function.
network
low complexity
ip-com CWE-120
critical
9.8
2022-12-23 CVE-2022-45715 Classic Buffer Overflow vulnerability in Ip-Com M50 Firmware 15.11.0.33
IP-COM M50 V15.11.0.33(10768) was discovered to contain multiple buffer overflows via the pLanPortRange and pWanPortRange parameters in the formSetPortMapping function.
network
low complexity
ip-com CWE-120
critical
9.8
2022-12-23 CVE-2022-45714 Classic Buffer Overflow vulnerability in Ip-Com M50 Firmware 15.11.0.33
IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the indexSet parameter in the formQOSRuleDel function.
network
low complexity
ip-com CWE-120
critical
9.8
2022-12-23 CVE-2022-45712 Classic Buffer Overflow vulnerability in Ip-Com M50 Firmware 15.11.0.33
IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the rules parameter in the formAddDnsForward function.
network
low complexity
ip-com CWE-120
critical
9.8
2022-12-23 CVE-2022-45711 OS Command Injection vulnerability in Ip-Com M50 Firmware 15.11.0.33
IP-COM M50 V15.11.0.33(10768) was discovered to contain a command injection vulnerability via the hostname parameter in the formSetNetCheckTools function.
network
low complexity
ip-com CWE-78
critical
9.8