| शीर्षक | QVidium QVidium Opera11 3.3.2a26-Ax4x-opera11 Command Injection |
|---|
| विवरण | Vulnerability Overview
The QVidium Opera11 device (firmware version: 3.3.2a26-Ax4x-opera11) suffers from a remote code execution (RCE) vulnerability due to insufficient endpoint input validation. Attackers can exploit this flaw by sending specially crafted GET requests carrying malicious parameters to /cgi-bin/net_tr.cgi to inject arbitrary system commands. The injected commands run with root privileges, enabling full device takeover and posing severe security risks to all affected devices.
https://uvxbywu62qm.feishu.cn/wiki/Tn2ewwaafigfabkMWJJcc3rhnud?from=from_copylink |
|---|
| स्रोत | ⚠️ https://uvxbywu62qm.feishu.cn/wiki/Tn2ewwaafigfabkMWJJcc3rhnud?from=from_copylink |
|---|
| उपयोगकर्ता | huliangjia (UID 99519) |
|---|
| सबमिशन | 04/07/2026 11:26 AM (2 महीनों पहले) |
|---|
| संयम | 31/08/2026 04:24 PM (2 months later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 397334 [QVidium Opera11 3.3.2a26-Ax4x-opera11 CGI Script /cgi-bin/net_tr.cgi ipaddr अधिकार वृद्धि] |
|---|
| अंक | 20 |
|---|