ZeroHour

Vulnerabilities

7 CVEs · NVD, GitHub Advisories, CISA KEV, FIRST EPSS, GitHub PoC repos

CVEVulnerabilityCVSSEPSSFlagsAffectedExposurePublished
CVE-2020-9026
+1 in the same advisory: …9027
ELTEX NTP-RG-1402G 1v10 3.25.3.32 devices allow OS command injection via the PING field of the resource ping.cmd.

ELTEX NTP-RG-1402G 1v10 3.25.3.32 devices allow OS command injection via the PING field of the resource ping.cmd. The NTP-2 device is also affected.

NVD description · AI analysis pending
9.83% PoC
  • eltex-co ntp-2 firmware
  • eltex-co ntp-rg-1402g firmware
CVE-2018-15356
+4 in the same advisory: …15359 …15358 …15360 …15357
An authenticated attacker can execute arbitrary code using command ejection in Eltex ESP-200 firmware version 1.2.0.

An authenticated attacker can execute arbitrary code using command ejection in Eltex ESP-200 firmware version 1.2.0.

NVD description · AI analysis pending
8.8
group max
3%
  • eltex esp-200 firmware