siretta vulnerabilities

Recent CVEs affecting siretta products. 64 tracked.

siretta has 64 tracked vulnerabilities, 43 critical. A fixed release or vendor patch exists for 0. Most recent: 2023-01-30. Highest priority: CVE-2022-42484 (score 68/100).

• CVE-2022-42493 CRITICAL 9.8 MITIGATE Several OS command injection vulnerabilities exist in the m2m binary of Siretta QUARTZ-GOLD G5.0.1.5-210720-14
• CVE-2022-42492 CRITICAL 9.8 MITIGATE Several OS command injection vulnerabilities exist in the m2m binary of Siretta QUARTZ-GOLD G5.0.1.5-210720-14
• CVE-2022-42491 CRITICAL 9.8 MITIGATE Several OS command injection vulnerabilities exist in the m2m binary of Siretta QUARTZ-GOLD G5.0.1.5-210720-14
• CVE-2022-42490 CRITICAL 9.8 MITIGATE Several OS command injection vulnerabilities exist in the m2m binary of Siretta QUARTZ-GOLD G5.0.1.5-210720-14
• CVE-2022-42484 CRITICAL 9.8 MITIGATE MITIGATE An OS command injection vulnerability exists in the httpd logs/view.cgi functionality of FreshTomato 2022.5
• CVE-2022-41991 CRITICAL 9.8 MITIGATE A heap-based buffer overflow vulnerability exists in the m2m DELETE_FILE cmd functionality of Siretta QUARTZ-G
• CVE-2022-41154 MEDIUM 6.5 MITIGATE A directory traversal vulnerability exists in the m2m DELETE_FILE cmd functionality of Siretta QUARTZ-GOLD G5.
• CVE-2022-41030 CRITICAL 9.8 MITIGATE Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Si
• CVE-2022-41029 HIGH 7.2 MITIGATE Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Si
• CVE-2022-41028 HIGH 7.2 MITIGATE Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Si
• CVE-2022-41027 HIGH 7.2 MITIGATE Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Si
• CVE-2022-41026 HIGH 7.2 MITIGATE Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Si
• CVE-2022-41025 HIGH 7.2 MITIGATE Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Si
• CVE-2022-41024 HIGH 7.2 MITIGATE Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Si
• CVE-2022-41023 HIGH 7.2 MITIGATE Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Si
• CVE-2022-41022 HIGH 7.2 MITIGATE Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Si
• CVE-2022-41021 HIGH 7.2 MITIGATE Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Si
• CVE-2022-41020 HIGH 7.2 MITIGATE Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Si
• CVE-2022-41019 CRITICAL 9.8 MITIGATE Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Si
• CVE-2022-41018 CRITICAL 9.8 MITIGATE Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Si
• CVE-2022-41017 CRITICAL 9.8 MITIGATE Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Si
• CVE-2022-41016 CRITICAL 9.8 MITIGATE Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Si
• CVE-2022-41015 CRITICAL 9.8 MITIGATE Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Si
• CVE-2022-41014 CRITICAL 9.8 MITIGATE Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Si
• CVE-2022-41013 CRITICAL 9.8 MITIGATE Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Si
• CVE-2022-41012 CRITICAL 9.8 MITIGATE Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Si
• CVE-2022-41011 CRITICAL 9.8 MITIGATE Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Si
• CVE-2022-41010 CRITICAL 9.8 MITIGATE Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Si
• CVE-2022-41009 CRITICAL 9.8 MITIGATE Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Si
• CVE-2022-41008 CRITICAL 9.8 MITIGATE Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Si
• CVE-2022-41007 CRITICAL 9.8 MITIGATE Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Si
• CVE-2022-41006 CRITICAL 9.8 MITIGATE Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Si
• CVE-2022-41005 CRITICAL 9.8 MITIGATE Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Si
• CVE-2022-41004 CRITICAL 9.8 MITIGATE Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Si
• CVE-2022-41003 CRITICAL 9.8 MITIGATE Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Si
• CVE-2022-41002 CRITICAL 9.8 MITIGATE Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Si
• CVE-2022-41001 CRITICAL 9.8 MITIGATE Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Si
• CVE-2022-41000 CRITICAL 9.8 MITIGATE Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Si
• CVE-2022-40999 CRITICAL 9.8 MITIGATE Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Si
• CVE-2022-40998 CRITICAL 9.8 MITIGATE Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Si
• CVE-2022-40997 CRITICAL 9.8 MITIGATE Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Si
• CVE-2022-40996 CRITICAL 9.8 MITIGATE Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Si
• CVE-2022-40995 CRITICAL 9.8 MITIGATE Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Si
• CVE-2022-40994 CRITICAL 9.8 MITIGATE Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Si
• CVE-2022-40993 CRITICAL 9.8 MITIGATE Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Si
• CVE-2022-40992 CRITICAL 9.8 MITIGATE Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Si
• CVE-2022-40991 CRITICAL 9.8 MITIGATE Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Si
• CVE-2022-40990 CRITICAL 9.8 MITIGATE Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Si
• CVE-2022-40989 CRITICAL 9.8 MITIGATE Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Si
• CVE-2022-40988 CRITICAL 9.8 MITIGATE Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Si
• CVE-2022-40987 CRITICAL 9.8 MITIGATE Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Si
• CVE-2022-40986 CRITICAL 9.8 MITIGATE Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Si
• CVE-2022-40985 CRITICAL 9.8 MITIGATE Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Si
• CVE-2022-40969 HIGH 8.8 MITIGATE An os command injection vulnerability exists in the httpd delfile.cgi functionality of Siretta QUARTZ-GOLD G5.
• CVE-2022-40701 HIGH 8.1 MITIGATE A directory traversal vulnerability exists in the httpd delfile.cgi functionality of Siretta QUARTZ-GOLD G5.0.
• CVE-2022-40222 CRITICAL 9.8 MITIGATE An OS command injection vulnerability exists in the m2m DELETE_FILE cmd functionality of Siretta QUARTZ-GOLD G
• CVE-2022-40220 HIGH 8.8 MITIGATE An OS command injection vulnerability exists in the httpd txt/restore.cgi functionality of Siretta QUARTZ-GOLD
• CVE-2022-39045 HIGH 8.8 MITIGATE A file write vulnerability exists in the httpd upload.cgi functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720
• CVE-2022-38715 HIGH 8.8 MITIGATE A leftover debug code vulnerability exists in the httpd shell.cgi functionality of Siretta QUARTZ-GOLD G5.0.1.
• CVE-2022-38459 HIGH 8.8 MITIGATE A stack-based buffer overflow vulnerability exists in the httpd downfile.cgi functionality of Siretta QUARTZ-G
• CVE-2022-38451 HIGH 7.5 MITIGATE MITIGATE A directory traversal vulnerability exists in the httpd update.cgi functionality of FreshTomato 2022.5
• CVE-2022-38088 MEDIUM 6.5 MITIGATE A directory traversal vulnerability exists in the httpd downfile.cgi functionality of Siretta QUARTZ-GOLD G5.0
• CVE-2022-38066 HIGH 8.8 MITIGATE An OS command injection vulnerability exists in the httpd SNMP functionality of Siretta QUARTZ-GOLD G5.0.1.5-2
• CVE-2022-36279 HIGH 8.8 MITIGATE A stack-based buffer overflow vulnerability exists in the httpd delfile.cgi functionality of Siretta QUARTZ-GO

FAQ

How do I fix siretta vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is siretta being exploited right now?

None of the tracked siretta CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which siretta CVE should I patch first?

CVE-2022-42484 currently ranks highest (68/100): An OS command injection vulnerability exists in the httpd logs/view.cgi functionality of FreshTomato 2022.5.

Products

• quartz-gold firmware

RSS feed for siretta · ← Back to latest CVEs