Skip to content
OpenAdvisories

Product · Helmholz

REX 100

9 known vulnerabilities.

5 results · Clear filters · Feed

  • Medium 4.8

    Persistent Cross-Site Scripting via POST Requests Due to Improper Neutralization of Input

    A high privileged remote attacker can gain persistent XSS via POST requests due to improper neutralization of special elements used to create dynamic content.

  • Medium 5.3

    Unauthenticated Buffer Overflow in Conftool Service Leading to Denial of Service

    An unauthenticated remote attacker could exploit a buffer overflow vulnerability in the device causing a denial of service that affects only the network initializing wizard (Conftool) service.

  • Medium 6.5

    SQL Injection via POST Requests Allowing Configuration Database Manipulation

    A high privileged remote attacker can alter the configuration database via POST requests due to improper neutralization of special elements used in a SQL statement.

  • Medium 4.9

    Resource Exhaustion via POST Requests to send-mail Action

    A high privileged remote attacker can exhaust critical system resources by sending specifically crafted POST requests to the send-mail action in fast succession.

  • Medium 4.9

    Resource Exhaustion via POST Requests to send-sms Action

    A high privileged remote attacker can exhaust critical system resources by sending specifically crafted POST requests to the send-sms action in fast succession.