Vulnerabilities

TI-2023-17416 CVE-2023-34849 · GHSA-924w-w384-3gf2

An unauthorized command injection vulnerability exists in the ActionLogin function of the…

HIGH 82

An unauthorized command injection vulnerability exists in the ActionLogin function of the webman.lua file in Ikuai router OS through 3.7.1.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02863 Published 2023-06-29 No fix listed CWE-77

TI-2022-19201 CVE-2022-40469 · GHSA-5v6v-qhhf-hv9g

HIGH 73

iKuai OS v3.6.7 was discovered to contain an authenticated remote code execution (RCE) vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.03141 Published 2022-10-12 No fix listed CWE-94

TI-2021-09331 CVE-2021-28075 · GHSA-mcjw-9v89-95jc

LOW 35

iKuaiOS 3.4.8 Build 202012291059 has an arbitrary file download vulnerability, which can be exploited by attackers to obtain sensitive information.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01052 Published 2021-04-06 No fix listed