Filtered by vendor Intenogroup Subscriptions
Filtered by product Iopsys Subscriptions
Total 3 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2017-17867 1 Intenogroup 1 Iopsys 2023-11-07 N/A
Inteno iopsys 2.0-3.14 and 4.0 devices allow remote authenticated users to execute arbitrary OS commands by modifying the leasetrigger field in the odhcpd configuration to specify an arbitrary program, as demonstrated by a program located on an SMB share. This issue existed because the /etc/uci-defaults directory was not being used to secure the OpenWrt configuration.
CVE-2018-10123 1 Intenogroup 2 Iopsys, Iopsys Firmware 2019-10-03 N/A
p910nd on Inteno IOPSYS 2.0 through 4.2.0 allows remote attackers to read, or append data to, arbitrary files via requests on TCP port 9100.
CVE-2018-14533 1 Intenogroup 2 Iopsys, Iopsys Firmware 2019-10-03 N/A
read_tmp and write_tmp in Inteno IOPSYS allow attackers to gain privileges after writing to /tmp/etc/smb.conf because /var is a symlink to /tmp.