Jamie Riden

**Nome do Software Vulnerável e Versões Afetadas** Versões do oxidized-web anteriores à 0.15.0 **Descrição** A falha permite que um usuário não autenticado obtenha controle sobre a conta de usuário Linux que executa o software por meio da página de migração do RANCID. **Recomendações** Para versões anteriores à 0.15.0, atualize para a versão 0.15.0 ou posterior para resolver o problema. Como solução temporária, considere restringir o acesso à página de migração do RANCID até que a atualização seja aplicada.

**Name of the Vulnerable Software and Affected Versions** NETGEAR EX7000 version 1.0.0.42 1.0.94 **Description** The issue allows for XSS via the SSID. **Recommendations** For NETGEAR EX7000 version 1.0.0.42 1.0.94, consider changing the SSID to a value that does not contain malicious code as a temporary workaround until a patch is available.

**Name of the Vulnerable Software and Affected Versions** Cognitoys Dino devices (affected versions not specified) **Description** The issue allows for XSS via the SSID. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Cognitoys Dino devices (affected versions not specified) **Description** The issue allows for a CSRF attack on the profiles add.html page. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** ANNKE SP1 HD wireless camera version 3.4.1.1604071109 **Description** The issue allows for cross-site scripting (XSS) attacks via a crafted SSID. This means an attacker could potentially inject malicious code into the device by manipulating the SSID, which could lead to unauthorized access or control of the device. **Recommendations** For ANNKE SP1 HD wireless camera version 3.4.1.1604071109, consider changing the SSID to a secure value and avoid using any user-provided input for the SSID until a patch is available. As a temporary workaround, restrict access to the device's web interface to minimize the risk of exploitation.