https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 07:07:58 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-250162 EUVD-2026-250162 https://cve.radiocsirt.org/vuln/euvd-2026-250162 https://cve.radiocsirt.org/vuln/fkie_cve-2025-53695 <p>OS Command Injection in iSTAR Ultra products web application allows an authenticated attacker to gain even more privileged access (&#39;root&#39; user) to the device firmware.</p> <p>OS Command Injection in iSTAR Ultra products web application allows an authenticated attacker to gain even more privileged access (&#39;root&#39; user) to the device firmware.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-53695 https://cve.radiocsirt.org/vuln/ghsa-g6w7-rgjj-7r73 <p>OS Command Injection in iSTAR Ultra products web application allows an authenticated attacker to gain even more privileged access (&#39;root&#39; user) to the device firmware.</p> <p>OS Command Injection in iSTAR Ultra products web application allows an authenticated attacker to gain even more privileged access (&#39;root&#39; user) to the device firmware.</p> https://cve.radiocsirt.org/vuln/ghsa-g6w7-rgjj-7r73 https://cve.radiocsirt.org/vuln/icsa-25-224-02 <p>OS command injection in iSTAR Ultra, Ultra SE, Ultra G2, Ultra G2 SE, Edge G2 versions 6.9.2 and prior web application allows an authenticated attacker to gain even more privileged access (&#39;root&#39; user) to the device firmware. This is fixed in versions 6.9.3 and newer. iSTAR Ultra and Ultra SE versions 6.9.2 and prior performs a firmware verification on boot, however the verification does not inspect certain portions of the firmware. These firmware parts may contain malicious code. Versions 6.9.3 and newer reduce the risk of this vulnerability. There is a default ‘root&#39; password for iSTAR Ultra, Ultra SE, Ultra G2, Ultra G2 SE, Edge G2 versions 6.9.2 and prior which can be changed through the command shell. iSTAR Ultra and Ultra SE Versions 6.9.3 and newer reduces the risk of this vulnerability. iSTAR Ultra G2, Ultra G2 SE and Edge G2 version 6.9.3 and newer fixes this vulnerability. There is an undocumented RJ11 serial console on the iSTAR GCM (General Controller Module) which provides access to Uboot. On older firmware versions, an attacker with physical access to this console can get direct access to a shell with ‘root&#39; privileges. In firmware Version 6.8.1 or newer, the console is disabled once the system has fully booted, however the console may be re-enabled due to lack of protection of the Uboot bootloader. USB ports on the GCM board are typically used to connect an ACM (Access Control Module) board. The ACM is what reads badge data, ‘push to exit&#39; signals, fire alar…</p> <p>OS command injection in iSTAR Ultra, Ultra SE, Ultra G2, Ultra G2 SE, Edge G2 versions 6.9.2 and prior web application allows an authenticated attacker to gain even more privileged access (&#39;root&#39; user) to the device firmware. This is fixed in versions 6.9.3 and newer. iSTAR Ultra and Ultra SE versions 6.9.2 and prior performs a firmware verification on boot, however the verification does not inspect certain portions of the firmware. These firmware parts may contain malicious code. Versions 6.9.3 and newer reduce the risk of this vulnerability. There is a default ‘root&#39; password for iSTAR Ultra, Ultra SE, Ultra G2, Ultra G2 SE, Edge G2 versions 6.9.2 and prior which can be changed through the command shell. iSTAR Ultra and Ultra SE Versions 6.9.3 and newer reduces the risk of this vulnerability. iSTAR Ultra G2, Ultra G2 SE and Edge G2 version 6.9.3 and newer fixes this vulnerability. There is an undocumented RJ11 serial console on the iSTAR GCM (General Controller Module) which provides access to Uboot. On older firmware versions, an attacker with physical access to this console can get direct access to a shell with ‘root&#39; privileges. In firmware Version 6.8.1 or newer, the console is disabled once the system has fully booted, however the console may be re-enabled due to lack of protection of the Uboot bootloader. USB ports on the GCM board are typically used to connect an ACM (Access Control Module) board. The ACM is what reads badge data, ‘push to exit&#39; signals, fire alar…</p> https://cve.radiocsirt.org/vuln/icsa-25-224-02