TI-2025-24204 CVE-2025-34035 · GHSA-xv32-fpqh-v67r
EnGenius EnShare IoT Gigabit Cloud Service Command Injection
Priority HIGH 82
An OS command injection vulnerability exists in EnGenius EnShare Cloud Service version 1.4.11 and earlier.
Vulnerabilities
15 records
TI-2025-20774 CVE-2025-28371 · GHSA-8p9j-879p-799j
EnGenius ENH500 AP 2T2R V3.0 FW3.7.22 is vulnerable to Incorrect Access Control via the…
Priority MEDIUM 62
EnGenius ENH500 AP 2T2R V3.0 FW3.7.22 is vulnerable to Incorrect Access Control via the password change function.
TI-2024-21075 CVE-2024-31976 · GHSA-m7vh-7qm6-rq42
EnGenius EWS356-FIR 1.1.30 and earlier devices allow a remote attacker to execute…
Priority LOW 39
EnGenius EWS356-FIR 1.1.30 and earlier devices allow a remote attacker to execute arbitrary OS commands via the Controller connectivity parameter.
TI-2024-10805 CVE-2024-11659 · GHSA-7rhm-f5w2-xhpm
EnGenius ENH1350EXT/ENS500-AC/ENS620EXT diag_iperf command injection
Priority MEDIUM 56
A vulnerability was found in EnGenius ENH1350EXT, ENS500-AC and ENS620EXT up to 20241118 and classified as critical.
TI-2024-10804 CVE-2024-11658 · GHSA-w5jp-mx9h-36w9
EnGenius ENH1350EXT/ENS500-AC/ENS620EXT ajax_getChannelList command injection
Priority MEDIUM 56
A vulnerability has been found in EnGenius ENH1350EXT, ENS500-AC and ENS620EXT up to 20241118 and classified as critical.
TI-2024-10803 CVE-2024-11657 · GHSA-c2mv-vx32-cw2p
EnGenius ENH1350EXT/ENS500-AC/ENS620EXT diag_nslookup command injection
Priority MEDIUM 56
A vulnerability, which was classified as critical, was found in EnGenius ENH1350EXT, ENS500-AC and ENS620EXT up to 20241118.
TI-2024-10802 CVE-2024-11656 · GHSA-cg8c-xfw6-pwwg
EnGenius ENH1350EXT/ENS500-AC/ENS620EXT diag_ping6 command injection
Priority MEDIUM 56
A vulnerability, which was classified as critical, has been found in EnGenius ENH1350EXT, ENS500-AC and ENS620EXT up to 20241118.
TI-2024-10801 CVE-2024-11655 · GHSA-65ww-rp43-h985
EnGenius ENH1350EXT/ENS500-AC/ENS620EXT diag_pinginterface command injection
Priority MEDIUM 56
A vulnerability classified as critical was found in EnGenius ENH1350EXT, ENS500-AC and ENS620EXT up to 20241118.
TI-2024-10800 CVE-2024-11654 · GHSA-85wm-rqrm-4w6x
EnGenius ENH1350EXT/ENS500-AC/ENS620EXT diag_traceroute6 command injection
Priority MEDIUM 56
A vulnerability classified as critical has been found in EnGenius ENH1350EXT, ENS500-AC and ENS620EXT up to 20241118.
TI-2024-10799 CVE-2024-11653 · GHSA-wxxp-2pwp-2vhg
EnGenius ENH1350EXT/ENS500-AC/ENS620EXT diag_traceroute command injection
Priority MEDIUM 56
A vulnerability was found in EnGenius ENH1350EXT, ENS500-AC and ENS620EXT up to 20241118.
TI-2024-10798 CVE-2024-11652 · GHSA-prc6-6v5h-g8v2
EnGenius ENH1350EXT/ENS500-AC/ENS620EXT sn_https command injection
Priority MEDIUM 56
A vulnerability was found in EnGenius ENH1350EXT, ENS500-AC and ENS620EXT up to 20241118.
TI-2024-10797 CVE-2024-11651 · GHSA-6w7h-f5rh-9fhg
EnGenius ENH1350EXT/ENS500-AC/ENS620EXT wifi_schedule command injection
Priority MEDIUM 56
A vulnerability was found in EnGenius ENH1350EXT, ENS500-AC and ENS620EXT up to 20241118.
TI-2024-23914 CVE-2024-36061 · GHSA-v8h2-p73v-3whx
EnGenius EWS356-FIT devices through 1.1.30 allow blind OS command injection.
Priority MEDIUM 51
EnGenius EWS356-FIT devices through 1.1.30 allow blind OS command injection.
TI-2024-21074 CVE-2024-31975 · GHSA-3x5w-67jh-3785
EnGenius EWS356-Fit devices through 1.1.30 allow a remote attacker to conduct stored XSS…
Priority LOW 22
EnGenius EWS356-Fit devices through 1.1.30 allow a remote attacker to conduct stored XSS attacks via the Wi-Fi SSID parameters.
TI-2019-08476 CVE-2019-11353 · GHSA-phgg-8q44-65j2
The EnGenius EWS660AP router with firmware 2.0.284 allows an attacker to execute…
Priority MEDIUM 48
The EnGenius EWS660AP router with firmware 2.0.284 allows an attacker to execute arbitrary commands using the built-in ping and traceroute utilities by using different payloads and injecting multiple parameters.