Skip to content
OpenAdvisories

Vendor

Newtec/iDirect

2 known vulnerabilities.

Products

NTC2218, NTC2250, NTC2299 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.3
    CVE-2024-13502

    A command injection in the NTC2218, NTC2250, NTC2299 modems' web interfaces allows to exeucte arbitrary shell commands.

    Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Newtec/iDirect NTC2218, NTC2250, NTC2299 on Linux, PowerPC, ARM allows Local Code Inclusion.This issue affects NTC2218, NTC2250, NTC2299: from 1.0.1.1 …

    Newtec/iDirect NTC2218, NTC2250, NTC2299
  • Critical 9.5
    CVE-2024-13503

    Stack-Based Buffer Overflow in Newtec's update signaling causes RCE

    Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in Newtec NTC2218, NTC2250, NTC2299 on Linux, PowerPC, ARM (Updating signaling process in the swdownload binary modules) allows Local Execution of Code, Remote Code Inclusion…

    Newtec/iDirect NTC2218, NTC2250, NTC2299