Liutong

**Name of the Vulnerable Software and Affected Versions** EnGenius ENH1350EXT versions up to 20241118 EnGenius ENS500-AC versions up to 20241118 EnGenius ENS620EXT versions up to 20241118 **Description** A critical issue affects some unknown functionality of the file /admin/network/diag iperf. The manipulation of the `iperf` argument leads to command injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. **Recommendations** For EnGenius ENH1350EXT versions up to 20241118, consider disabling access to the `/admin/network/diag iperf` file until a patch is available. For EnGenius ENS500-AC versions up to 20241118, consider disabling access to the `/admin/network/diag iperf` file until a patch is available. For EnGenius ENS620EXT versions up to 20241118, consider disabling access to the `/admin/network/diag iperf` file until a patch is available. As a temporary workaround, consider restricting the use of the `iperf` argument in the affected file until a patch is available.

**Name of the Vulnerable Software and Affected Versions** EnGenius ENH1350EXT versions up to 20241118 EnGenius ENS500-AC versions up to 20241118 EnGenius ENS620EXT versions up to 20241118 **Description** A critical issue was found in the affected devices, allowing for command injection through the manipulation of the `diag nslookup` argument in the `/admin/network/diag nslookup` file. This can be exploited remotely. The issue has been publicly disclosed, and the vendor was notified but did not respond. **Recommendations** For EnGenius ENH1350EXT versions up to 20241118, consider disabling access to the `/admin/network/diag nslookup` file until a patch is available. For EnGenius ENS500-AC versions up to 20241118, restrict the use of the `diag nslookup` argument in the affected file to minimize the risk of exploitation. For EnGenius ENS620EXT versions up to 20241118, avoid using the `/admin/network/diag nslookup` file until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** EnGenius ENH1350EXT versions up to 20241118 EnGenius ENS500-AC versions up to 20241118 EnGenius ENS620EXT versions up to 20241118 **Description** A critical issue has been found in the affected devices, related to an unknown functionality of the file /admin/network/ajax getChannelList. The manipulation of the `countryCode` argument leads to command injection. This issue can be exploited remotely. The exploit has been disclosed publicly, and the vendor was contacted about this issue but did not respond. **Recommendations** For EnGenius ENH1350EXT versions up to 20241118, consider disabling access to the /admin/network/ajax getChannelList file until a patch is available. For EnGenius ENS500-AC versions up to 20241118, restrict the use of the `countryCode` argument in the affected file to minimize the risk of exploitation. For EnGenius ENS620EXT versions up to 20241118, avoid using the /admin/network/ajax getChannelList file remotely until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** EnGenius ENH1350EXT, ENS500-AC and ENS620EXT up to 20241118 **Description** A critical vulnerability affects an unknown functionality of the file /admin/sn package/sn https. The manipulation of the argument `https enable` leads to command injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. **Recommendations** For EnGenius ENH1350EXT, ENS500-AC and ENS620EXT up to 20241118, update to the latest firmware and apply all recommended patches to safeguard your systems. As a temporary workaround, consider restricting access to the `/admin/sn package/sn https` file until a patch is available. Avoid using the argument `https enable` in the affected file until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** EnGenius ENH1350EXT versions up to 20241118 EnGenius ENS500-AC versions up to 20241118 EnGenius ENS620EXT versions up to 20241118 **Description** A critical issue affects some unknown functionality of the file /admin/network/diag traceroute. The manipulation of the `diag traceroute` argument leads to command injection. This issue can be exploited remotely. The exploit has been disclosed publicly, and the vendor was contacted but did not respond. **Recommendations** For EnGenius ENH1350EXT versions up to 20241118, consider disabling access to the /admin/network/diag traceroute file until a patch is available. For EnGenius ENS500-AC versions up to 20241118, restrict the use of the `diag traceroute` argument in the /admin/network/diag traceroute file to minimize the risk of exploitation. For EnGenius ENS620EXT versions up to 20241118, avoid using the `diag traceroute` argument in the affected file until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** EnGenius ENH1350EXT versions up to 20241118 EnGenius ENS500-AC versions up to 20241118 EnGenius ENS620EXT versions up to 20241118 **Description** A critical vulnerability has been found in EnGenius devices, affecting an unknown part of the file `/admin/network/diag traceroute6`. The manipulation of the `diag traceroute6` argument leads to command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. **Recommendations** For EnGenius ENH1350EXT versions up to 20241118, consider disabling access to the `/admin/network/diag traceroute6` endpoint until a patch is available. For EnGenius ENS500-AC versions up to 20241118, consider disabling access to the `/admin/network/diag traceroute6` endpoint until a patch is available. For EnGenius ENS620EXT versions up to 20241118, consider disabling access to the `/admin/network/diag traceroute6` endpoint until a patch is available. As a temporary workaround, consider restricting the use of the `diag traceroute6` argument in the affected endpoint to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** EnGenius ENH1350EXT versions up to 20241118 EnGenius ENS500-AC versions up to 20241118 EnGenius ENS620EXT versions up to 20241118 **Description** A critical vulnerability was found in the specified EnGenius devices, affecting the file `/admin/network/diag pinginterface`. The manipulation of the `diag ping` argument leads to command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. **Recommendations** For EnGenius ENH1350EXT versions up to 20241118, consider disabling access to the `/admin/network/diag pinginterface` file until a patch is available. For EnGenius ENS500-AC versions up to 20241118, restrict the use of the `diag ping` argument in the affected file to minimize the risk of exploitation. For EnGenius ENS620EXT versions up to 20241118, avoid using the `diag ping` argument in the `/admin/network/diag pinginterface` file until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** EnGenius ENH1350EXT, ENS500-AC and ENS620EXT up to 20241118 **Description** A critical issue has been found in the processing of the file `/admin/network/diag ping6`. The manipulation of the argument `diag ping6` leads to command injection. This issue can be exploited remotely. The exploit has been disclosed to the public. The vendor was contacted about this disclosure but did not respond. **Recommendations** For EnGenius ENH1350EXT, ENS500-AC and ENS620EXT up to 20241118, as a temporary workaround, consider restricting access to the `/admin/network/diag ping6` file to minimize the risk of exploitation. Avoid using the argument `diag ping6` in the affected file until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** EnGenius ENH1350EXT, ENS500-AC, and ENS620EXT versions up to 20241118 **Description** A critical issue affects an unknown function of the file /admin/network/wifi schedule. The manipulation of the argument `wifi schedule day em 5` leads to command injection. It is possible to launch the attack remotely. The vendor was contacted early about this disclosure but did not respond in any way. **Recommendations** For EnGenius ENH1350EXT, ENS500-AC, and ENS620EXT versions up to 20241118, update to the latest firmware to mitigate risks. As a temporary workaround, consider restricting access to the /admin/network/wifi schedule file until a patch is available. Avoid using the argument `wifi schedule day em 5` in the affected API endpoint until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** E-Lins H685 versions up to 3.2 E-Lins H685f versions up to 3.2 E-Lins H700 versions up to 3.2 E-Lins H720 versions up to 3.2 E-Lins H750 versions up to 3.2 E-Lins H820 versions up to 3.2 E-Lins H820Q versions up to 3.2 E-Lins H820Q0 versions up to 3.2 E-Lins H900 versions up to 3.2 **Description** A critical issue has been found in the OEM Backend component, affecting unknown code and leading to hard-coded credentials. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. It is recommended to change the configuration settings. The vendor was contacted early about this disclosure but did not respond in any way. **Recommendations** For E-Lins H685 version up to 3.2, change the configuration settings. For E-Lins H685f version up to 3.2, change the configuration settings. For E-Lins H700 version up to 3.2, change the configuration settings. For E-Lins H720 version up to 3.2, change the configuration settings. For E-Lins H750 version up to 3.2, change the configuration settings. For E-Lins H820 version up to 3.2, change the configuration settings. For E-Lins H820Q version up to 3.2, change the configuration settings. For E-Lins H820Q0 version up to 3.2, change the configuration settings. For E-Lins H900 version up to 3.2, change the configuration settings.