seowonintech vulnerabilities

Products

• swc-9100 2
• 130-slc firmware 1
• slc-130 firmware 1
• slr-120d42g firmware 1
• slr-120s firmware 1
• slr-120s42g firmware 1
• slr-120t42g firmware 1
• swc-5100w firmware 1
• swr-300a firmware 1
• swr-300b firmware 1
• swr-300bg firmware 1
• swr-300c firmware 1

Latest seowonintech CVEs

Newest publication first

1. CVE-2023-27826 SeowonIntech SWC 5100W WIMAX Bootloader 1.18.19.0, HW 0.0.7.0, and FW 1.11.0.1, 1.9.9.4 are vulnerable to OS Command Injection. which allows attackers to take over the system with root privilege by ab...

   Published 2023-04-12

   High·CVSS 8.8 EPSS 11.8%

   SeowonIntech SWC 5100W WIMAX Bootloader 1.18.19.0, HW 0.0.7.0, and FW 1.11.0.1, 1.9.9.4 are vulnerable to OS Command Injection. which allows attackers to take over the system with root privilege by abusing doSystem() function.

2. CVE-2021-42230 Seowon 130-SLC router all versions as of 2021-09-15 is vulnerable to Remote Code Execution via the queriesCnt parameter.

   Published 2022-04-15

   Critical·CVSS 9.8 EPSS 6.3%

   Seowon 130-SLC router all versions as of 2021-09-15 is vulnerable to Remote Code Execution via the queriesCnt parameter.

3. CVE-2020-17456 SEOWON INTECH SLC-130 And SLR-120S devices allow Remote Code Execution via the ipAddr parameter to the system_log.cgi page.

   Published 2020-08-19

   Critical·CVSS 9.8 EPSS 74.2%

   SEOWON INTECH SLC-130 And SLR-120S devices allow Remote Code Execution via the ipAddr parameter to the system_log.cgi page.

4. CVE-2016-10760 On Seowon Intech routers, there is a Command Injection vulnerability in diagnostic.cgi via shell metacharacters in the ping_ipaddr parameter.

   Published 2019-06-11

   Critical·CVSS 9.8 EPSS 3.3%

   On Seowon Intech routers, there is a Command Injection vulnerability in diagnostic.cgi via shell metacharacters in the ping_ipaddr parameter.

5. CVE-2013-7179 The ping functionality in cgi-bin/diagnostic.cgi on Seowon Intech SWC-9100 routers allows remote attackers to execute arbitrary commands via shell metacharacters in the ping_ipaddr parameter.

   Published 2014-02-04

   High·CVSS 8.3 EPSS 4.0%

   The ping functionality in cgi-bin/diagnostic.cgi on Seowon Intech SWC-9100 routers allows remote attackers to execute arbitrary commands via shell metacharacters in the ping_ipaddr parameter.

6. CVE-2013-7183 cgi-bin/reboot.cgi on Seowon Intech SWC-9100 routers allows remote attackers to (1) cause a denial of service (reboot) via a default_reboot action or (2) reset all configuration values via a factory_d...

   Published 2014-02-04

   High·CVSS 7.8 EPSS 3.1%

   cgi-bin/reboot.cgi on Seowon Intech SWC-9100 routers allows remote attackers to (1) cause a denial of service (reboot) via a default_reboot action or (2) reset all configuration values via a factory_default action.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.