Skip to content
OpenAdvisories

Vendor

Sunhillo

3 known vulnerabilities.

Products

2 results · Clear filters · Feed

  • High 8.8

    Sunhillo SureLine OS Command Injection via networkDiag.cgi

    Sunhillo SureLine before 9.1.5 contains an OS command injection vulnerability in the networkDiag.cgi endpoint that allows an authenticated remote attacker with any web account to execute arbitrary commands as root by injecting shell metacharacters into the ip…

  • High 7.5

    Sunhillo SureLine Path Traversal via radarUpdater.cgi

    Sunhillo SureLine before 9.1.5 contains a path traversal vulnerability in the radarUpdater.cgi endpoint that allows unauthenticated remote attackers to read arbitrary files with root privileges due to missing authentication checks and insufficient sanitizatio…