Engeniustech
15 CVEs across 28 Engeniustech products. Browse Engeniustech vulnerabilities, severities, and proof-of-concept exploits.
Engeniustech products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-34035 | Critical | 9.8 | 2025-06-24 | An OS command injection vulnerability exists in EnGenius EnShare Cloud Service version 1.4.11 and earlier. The usbinteract.cgi script fails to properly sanitiz… |
CVE-2025-28371 | Medium | 6.5 | 2025-05-19 | EnGenius ENH500 AP 2T2R V3.0 FW3.7.22 is vulnerable to Incorrect Access Control via the password change function. The device fails to validate the current pass… |
CVE-2024-31976 | High | 8.0 | 2024-11-27 | EnGenius EWS356-FIR 1.1.30 and earlier devices allow a remote attacker to execute arbitrary OS commands via the Controller connectivity parameter. |
CVE-2024-11659 | Medium | 4.7 | 2024-11-25 | A vulnerability was found in EnGenius ENH1350EXT, ENS500-AC and ENS620EXT up to 20241118 and classified as critical. Affected by this issue is some unknown fun… |
CVE-2024-11658 | Medium | 4.7 | 2024-11-25 | A vulnerability has been found in EnGenius ENH1350EXT, ENS500-AC and ENS620EXT up to 20241118 and classified as critical. Affected by this vulnerability is an… |
CVE-2024-11657 | Medium | 4.7 | 2024-11-25 | A vulnerability, which was classified as critical, was found in EnGenius ENH1350EXT, ENS500-AC and ENS620EXT up to 20241118. Affected is an unknown function of… |
CVE-2024-11656 | Medium | 4.7 | 2024-11-25 | A vulnerability, which was classified as critical, has been found in EnGenius ENH1350EXT, ENS500-AC and ENS620EXT up to 20241118. This issue affects some unkno… |
CVE-2024-11655 | Medium | 4.7 | 2024-11-25 | A vulnerability classified as critical was found in EnGenius ENH1350EXT, ENS500-AC and ENS620EXT up to 20241118. This vulnerability affects unknown code of the… |
CVE-2024-11654 | Medium | 4.7 | 2024-11-25 | A vulnerability classified as critical has been found in EnGenius ENH1350EXT, ENS500-AC and ENS620EXT up to 20241118. This affects an unknown part of the file… |
CVE-2024-11653 | Medium | 4.7 | 2024-11-25 | A vulnerability was found in EnGenius ENH1350EXT, ENS500-AC and ENS620EXT up to 20241118. It has been rated as critical. Affected by this issue is some unknown… |
CVE-2024-11652 | Medium | 4.7 | 2024-11-25 | A vulnerability was found in EnGenius ENH1350EXT, ENS500-AC and ENS620EXT up to 20241118. It has been declared as critical. Affected by this vulnerability is a… |
CVE-2024-11651 | Medium | 4.7 | 2024-11-25 | A vulnerability was found in EnGenius ENH1350EXT, ENS500-AC and ENS620EXT up to 20241118. It has been classified as critical. Affected is an unknown function o… |
CVE-2024-36061 | Critical | 9.8 | 2024-11-11 | EnGenius EWS356-FIT devices through 1.1.30 allow blind OS command injection. This allows an attacker to execute arbitrary OS commands via shell metacharacters… |
CVE-2024-31975 | Medium | 4.8 | 2024-10-30 | EnGenius EWS356-Fit devices through 1.1.30 allow a remote attacker to conduct stored XSS attacks via the Wi-Fi SSID parameters. JavaScript embedded into a vuln… |
CVE-2019-11353 | Critical | 9.8 | 2019-05-09 | The EnGenius EWS660AP router with firmware 2.0.284 allows an attacker to execute arbitrary commands using the built-in ping and traceroute utilities by using d… |