Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Command Injection
Vulnerability Description
Missing input validation and OS command integration of the input in the ORing IAP-420 web-interface allows authenticated command injection.This issue affects IAP-420 version 2.01e and below.
CVSS Information
N/A
Vulnerability Type
OS命令中使用的特殊元素转义处理不恰当(OS命令注入)
Vulnerability Title
ORing IAP-420 安全漏洞
Vulnerability Description
ORing Net IAP-420+是中国威力(ORing)公司的一种无线接入点。 ORing IAP-420 2.01e 及之前版本存在安全漏洞,该漏洞源于网络界面中输入缺少输入验证和操作系统命令集成,导致命令注入。
CVSS Information
N/A
Vulnerability Type
N/A