Vulnerabilities

TI-2023-11824 CVE-2023-26921 · GHSA-fcmf-jqfc-733w

OS Command Injection vulnerability in quectel AG550QCN allows attackers to execute arbitrary commands via ql_atfwd.

HIGH 82

OS Command Injection vulnerability in quectel AG550QCN allows attackers to execute arbitrary commands via ql_atfwd.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02692 Published 2023-04-04 No fix listed CWE-78

TI-2022-09604 CVE-2022-26147 · GHSA-3p3m-h26v-9r73

The Quectel RG502Q-EA modem before 2022-02-23 allow OS Command Injection.

MEDIUM 47

The Quectel RG502Q-EA modem before 2022-02-23 allow OS Command Injection.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02654 Published 2022-06-21 No fix listed CWE-78

TI-2021-20857 CVE-2021-45815 · GHSA-p653-4j6m-xv68

Quectel UC20 UMTS/HSPA+ UC20 6.3.14 is affected by a Cross Site Scripting (XSS) vulnerability.

LOW 28

Quectel UC20 UMTS/HSPA+ UC20 6.3.14 is affected by a Cross Site Scripting (XSS) vulnerability.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00581 Published 2021-12-30 No fix listed CWE-79

TI-2021-11752 CVE-2021-31698 · GHSA-7r3r-jp3h-r9vx

Quectel EG25-G devices through 202006130814 allow executing arbitrary code remotely by…

MEDIUM 46

Quectel EG25-G devices through 202006130814 allow executing arbitrary code remotely by using an AT command to place shell metacharacters in quectel_handle_fumo_cfg input in atfwd_daemon.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01997 Published 2021-08-12 No fix listed CWE-78

Vulnerabilities

Filters

OS Command Injection vulnerability in quectel AG550QCN allows attackers to execute arbitrary commands via ql_atfwd.

The Quectel RG502Q-EA modem before 2022-02-23 allow OS Command Injection.

Quectel UC20 UMTS/HSPA+ UC20 6.3.14 is affected by a Cross Site Scripting (XSS) vulnerability.

Quectel EG25-G devices through 202006130814 allow executing arbitrary code remotely by…