Skip to content
OpenAdvisories

Product · Netcore

NR256CN

4 known vulnerabilities.

2 results · Clear filters · Feed

  • Medium 6.5

    Netcore NR256CN through 1.5.140116 Unauthenticated Write to Fixed Boa Staging Files

    Netcore NR256CN through 1.5.140116 contains an unauthenticated file write vulnerability in the Boa-derived /bin/boa web server that allows remote attackers to overwrite update and restore staging files. Attackers can POST to a non-existent .cgi pathname to wr…

  • Medium 6.5

    Netcore NR256CN through 1.5.140116 Authentication Bypass via CGI Path Prefix

    Netcore NR256CN through 1.5.140116 contains an authentication bypass vulnerability that allows unauthenticated attackers to reach protected management CGI handlers by prefixing the URI with a public route. Attackers can request paths prefixed with l7_web_auth…