ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

Vulnerabilities

12 CVEs · NVD, GitHub Advisories, CISA KEV, FIRST EPSS, GitHub PoC repos

ShowKEV onlyPublic PoCCVSS ≥ 9CVSS ≥ 7EPSS ≥ 10%EPSS ≥ 50%Window24h7d30d90dAll
StackAllWordPressE-commerceDrupalJoomlanpmpipMavenGoPackagistRubyGemsNuGet
SortpublishedepsscvssKEV dateupdatedvendor: optilinknetwork ✕
CVEVulnerabilityCVSSEPSSFlagsAffectedExposurePublished
CVE-2020-23584
+10 in the same advisory: …23583 …23591 …23592 …23585 …23589 …23593 +4
Unauthenticated remote code execution in OPTILINK OP-XT71000N, Hardware Version:

Unauthenticated remote code execution in OPTILINK OP-XT71000N, Hardware Version: V2.2 occurs when the attacker passes arbitrary commands with IP-ADDRESS using " | " to execute commands on " /diag_tracert_admin.asp " in the "PingTest" parameter that leads to command execution.

NVD description · AI analysis pending		9.8
group max
41%
  • optilinknetwork op-xt71000n firmware
—
CVE-2020-23582
A vulnerability in the "/admin/wlmultipleap.asp" of optilink OP-XT71000N version:

A vulnerability in the "/admin/wlmultipleap.asp" of optilink OP-XT71000N version: V2.2 could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack to create Multiple WLAN BSSID.

NVD description · AI analysis pending		6.5<1%
  • optilinknetwork op-xt71000n firmware
—