Ikuai8: Security Vulnerabilities
An unauthorized command injection vulnerability exists in the ActionLogin function of the webman.lua file in Ikuai router OS through 3.7.1.
CVSS Score
9.8
EPSS Score
0.013
Published
2023-06-29
iKuai OS v3.6.7 was discovered to contain an authenticated remote code execution (RCE) vulnerability.
CVSS Score
8.8
EPSS Score
0.042
Published
2022-10-12
iKuaiOS 3.4.8 Build 202012291059 has an arbitrary file download vulnerability, which can be exploited by attackers to obtain sensitive information.
CVSS Score
7.5
EPSS Score
0.004
Published
2021-04-06