Vulnerabilities

TI-2025-21028 CVE-2025-29269 · GHSA-q2pm-pcpj-8r24

ALLNET ALL-RUT22GW v3.3.8 was discovered to contain an OS command injection vulnerability…

HIGH 82

ALLNET ALL-RUT22GW v3.3.8 was discovered to contain an OS command injection vulnerability via the command parameter in the popen.cgi endpoint.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01981 Published 2025-12-04 No fix listed CWE-78

TI-2025-21027 CVE-2025-29268 · GHSA-qqrg-5x8x-xqg5

ALLNET ALL-RUT22GW v3.3.8 was discovered to store hardcoded credentials in the libicos.so library.

MEDIUM 60

ALLNET ALL-RUT22GW v3.3.8 was discovered to store hardcoded credentials in the libicos.so library.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.09084 Published 2025-12-04 No fix listed CWE-798

TI-2022-15574 CVE-2022-34767 · GHSA-c873-6fqc-4wg3

ALLNET Gmbh - ADSL/VDSL Router inkl. Modem and Wlan Authorization Bypass

MEDIUM 43

Web page which "wizardpwd.asp" ALLNET Router model WR0500AC is prone to Authorization bypass vulnerability – the password, located at "admin" allows changing the http[s]://wizardpwd.asp/cgi-bin.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00632 Published 2022-07-21 No fix listed CWE-306

Vulnerabilities

Filters

ALLNET ALL-RUT22GW v3.3.8 was discovered to contain an OS command injection vulnerability…

ALLNET ALL-RUT22GW v3.3.8 was discovered to store hardcoded credentials in the libicos.so library.

ALLNET Gmbh - ADSL/VDSL Router inkl. Modem and Wlan Authorization Bypass