Critical
CVSS: 9.8
RE11S v1.11 was discovered to contain a command injection vulnerability via the component /goform/formAccept.
Critical
CVSS: 9.8
RE11S v1.11 was discovered to contain a stack overflow via the selSSID parameter in the formWlSiteSurvey function.
Critical
CVSS: 9.8
RE11S v1.11 was discovered to contain a command injection vulnerability via the L2TPUserName parameter at /goform/setWAN.
Critical
CVSS: 9.8
RE11S v1.11 was discovered to contain a command injection vulnerability via the command parameter at /goform/mp.
Critical
CVSS: 9.8
RE11S v1.11 was discovered to contain a stack overflow via the pptpUserName parameter in the setWAN function.