Vulnerabilities

TI-2022-16868 CVE-2022-36555 · GHSA-4q2f-2vfx-8gg8

Hytec Inter HWL-2511-SS v1.05 and below implements a SHA512crypt hash for the root…

MEDIUM 43

Hytec Inter HWL-2511-SS v1.05 and below implements a SHA512crypt hash for the root account which can be easily cracked via a brute-force attack.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00718 Published 2022-08-29 No fix listed CWE-326

TI-2022-16867 CVE-2022-36554 · GHSA-mcmc-5mcv-75hx

A command injection vulnerability in the CLI (Command Line Interface) implementation of…

MEDIUM 47

A command injection vulnerability in the CLI (Command Line Interface) implementation of Hytec Inter HWL-2511-SS v1.05 and below allows attackers to execute arbitrary commands with root privileges.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02395 Published 2022-08-29 No fix listed CWE-77

TI-2022-16866 CVE-2022-36553 · GHSA-97r8-53vm-gj6h

Hytec Inter HWL-2511-SS v1.05 and below was discovered to contain a command injection…

CRITICAL 86

Hytec Inter HWL-2511-SS v1.05 and below was discovered to contain a command injection vulnerability via the component /www/cgi-bin/popen.cgi.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.96978 Published 2022-08-29 No fix listed CWE-77

Vulnerabilities

Filters

Hytec Inter HWL-2511-SS v1.05 and below implements a SHA512crypt hash for the root…

A command injection vulnerability in the CLI (Command Line Interface) implementation of…

Hytec Inter HWL-2511-SS v1.05 and below was discovered to contain a command injection…