Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Vendor: PROLiNK Clear all filters
TI-2021-14195 CVE-2021-35402 · GHSA-68g8-2724-hq79

OS command injection in PROLiNK PRC2402M

Priority HIGH 82

PROLiNK PRC2402M 20190909 before 2021-06-13 allows live_api.cgi?page=satellite_list OS command injection via shell metacharacters in the ip parameter (for satellite_status).

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.01086 Published 2026-02-20 Fixed in 2021-06-13 CWE-78
TI-2021-14848 CVE-2021-36707 · GHSA-f8hv-38c8-7mr9

In ProLink PRC2402M V1.0.18 and older, the set_ledonoff function in the adm.cgi binary…

Priority MEDIUM 47

In ProLink PRC2402M V1.0.18 and older, the set_ledonoff function in the adm.cgi binary, accessible with a page parameter value of ledonoff contains a trivial command injection where the value of the led_cmd parameter is…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02621 Published 2021-08-06 No fix listed CWE-77
TI-2021-14847 CVE-2021-36706 · GHSA-8g3m-7h36-26g3

In ProLink PRC2402M V1.0.18 and older, the set_sys_cmd function in the adm.cgi binary…

Priority MEDIUM 47

In ProLink PRC2402M V1.0.18 and older, the set_sys_cmd function in the adm.cgi binary, accessible with a page parameter value of sysCMD contains a trivial command injection where the value of the command parameter is pas…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02621 Published 2021-08-06 No fix listed CWE-78
TI-2021-14846 CVE-2021-36705 · GHSA-6f6j-c55c-5gxx

In ProLink PRC2402M V1.0.18 and older, the set_TR069 function in the adm.cgi binary…

Priority MEDIUM 47

In ProLink PRC2402M V1.0.18 and older, the set_TR069 function in the adm.cgi binary, accessible with a page parameter value of TR069 contains a trivial command injection where the value of the TR069_local_port parameter…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02621 Published 2021-08-06 No fix listed CWE-78