Endian Firewall version 3.3.25 and earlier contains a stored cross-site scripting (XSS) vulnerability in the name parameter of the /manage/qos/classes/ page. An authenticated attacker can inject malicious JavaScript code that is stored and executed when other users view the affected page. This vulnerability has a medium severity with a CVSS score of 5.1. No official patch or remediation information is provided in the available data.
Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the remark user ham spam parameter to /cgi-bin/salearn.cgi. An authenticated attacker can inject arbitrary JavaScript that is stored and executed when other users view the affected page.
Endian Firewall version 3.3.25 and earlier contains a stored cross-site scripting (XSS) vulnerability in the remark parameter of the /manage/dhcp/fixed_leases/ page. An authenticated attacker can inject malicious JavaScript code that is stored and executed when other users view the affected page. This vulnerability has a medium severity rating with a CVSS score of 5.1. There is no information provided about an available patch or official remediation. The vulnerability does not affect cloud services and no known exploits are reported in the wild.
Endian Firewall version 3.3.25 and earlier contains a stored cross-site scripting (XSS) vulnerability in the NAME parameter of /cgi-bin/uplinkeditor.cgi. This flaw allows an authenticated attacker to inject arbitrary JavaScript code that is stored and executed when other users access the affected page. The vulnerability has a medium severity rating with a CVSS 4.0 score of 5.1. No official patch or remediation guidance is currently provided by the vendor.
Endian Firewall version 3.3.25 and earlier contains a stored cross-site scripting (XSS) vulnerability in the remark parameter of the /manage/dnsmasq/hosts/ page. An authenticated attacker can inject malicious JavaScript code that is stored and executed when other users view the affected page. This vulnerability has a medium severity with a CVSS 4.0 base score of 5.1. No official patch or remediation information is provided in the available data.
Endian Firewall version 3.3.25 and earlier contains a stored cross-site scripting (XSS) vulnerability in the remark parameter of /cgi-bin/routing.cgi. An authenticated attacker can inject malicious JavaScript code that is stored and later executed when other users view the affected page. This vulnerability has a medium severity rating with a CVSS score of 5.1. No official patch or remediation information is provided in the available data.
Endian Firewall version 3.3.25 and earlier contains an OS command injection vulnerability in the DATE parameter of the /cgi-bin/logs_smtp.cgi endpoint. Authenticated users can exploit this flaw due to insufficient validation of the DATE parameter, which is used in constructing a file path passed to a Perl open() call. This improper neutralization of special elements allows arbitrary OS command execution. The vulnerability has a high severity with a CVSS 4.0 base score of 8.7. No patch or official remediation has been provided yet, and no known exploits are reported in the wild.
Endian Firewall version 3.3.25 and prior allow authenticated users to execute arbitrary OS commands via the DATE parameter to /cgi-bin/logs_openvpn.cgi. The DATE parameter value is used to construct a file path that is passed to a Perl open() call, which allows command injection due to an incomplete regular expression validation.
Endian Firewall version 3.3.25 and earlier contains an OS command injection vulnerability in the DATE parameter of /cgi-bin/logs_log.cgi. Authenticated users can exploit this flaw because the DATE parameter is used unsafely in a Perl open() call due to incomplete input validation. This allows arbitrary OS command execution with the privileges of the affected process. The vulnerability has a high severity score of 8.7. No patch or official fix information is currently provided, and no known exploits are reported in the wild.
Endian Firewall version 3.3.25 and earlier contains an OS command injection vulnerability in the DATE parameter of /cgi-bin/logs_ids.cgi. Authenticated users can exploit this flaw because the DATE parameter is used unsafely in a Perl open() call due to incomplete input validation. This allows arbitrary OS command execution. The vulnerability has a high severity with a CVSS score of 8.7. No patch or official remediation has been indicated in the provided data. There are no known exploits in the wild at this time.
Endian Firewall version 3.3.25 and earlier contains an OS command injection vulnerability in the handling of the DATE parameter in /cgi-bin/logs_firewall.cgi. Authenticated users can exploit this flaw to execute arbitrary operating system commands due to insufficient validation of the DATE parameter, which is used in a Perl open() call. This vulnerability is classified as CWE-78 and has a high severity with a CVSS score of 8.7. No official patch or remediation information is currently provided by the vendor. There are no known exploits in the wild at this time.
Endian Firewall version 3.3.25 and earlier contains an OS command injection vulnerability in the /cgi-bin/logs_clamav.cgi endpoint. Authenticated users can exploit improper input validation of the DATE parameter, which is used in a Perl open() call to construct a file path, allowing arbitrary OS command execution. This vulnerability is due to incomplete regular expression validation of the input. The CVSS 4.0 base score is 8.7, indicating high severity. No official patch or remediation information is currently provided by the vendor.
Endian Firewall version 3.3.25 and earlier contains an OS command injection vulnerability in the logs_proxy.cgi component. Authenticated users can exploit improper input validation of the DATE parameter to execute arbitrary operating system commands. This occurs because the parameter is used to build a file path passed to a Perl open() call without sufficient sanitization. The vulnerability has a high severity with a CVSS 4.0 score of 8.7. No patch or official fix information is currently provided.
Endian Firewall version 3.3.25 and prior allow authenticated users to delete arbitrary files via directory traversal in the remove ARCHIVE parameter to /cgi-bin/backup.cgi. The remove ARCHIVE parameter value is used to construct a file path without sanitization of directory traversal sequences, which is then passed to an unlink() call.