Z3

**Name of the Vulnerable Software and Affected Versions** baijiacmsV4 version 4.1.4 **Description** A Server-Side Request Forgery (SSRF) issue exists in the fetch net file upload function, allowing remote attackers to force the application to make arbitrary requests by injecting arbitrary URLs into the `url` parameter. **Recommendations** For baijiacmsV4 version 4.1.4, as a temporary workaround, consider restricting access to the fetch net file upload function until a patch is available. Avoid using the `url` parameter in the affected function to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** WAVLINK AC1200 version WAVLINK-A42W-1.27.6-20180418 **Description** A vulnerability exists in the 'wx.html' page, allowing a remote attacker to access this page without authentication. When an unauthorized user accesses this page directly, it connects to the device as a friend of the device owner. **Recommendations** For version WAVLINK-A42W-1.27.6-20180418, as a temporary workaround, consider restricting access to the 'wx.html' page until a patch is available.

**Name of the Vulnerable Software and Affected Versions** Netgear W104 version WAC104-V1.0.4.13 **Description** A vulnerability in the 'MNU top.htm' page allows a remote attacker to access this page without authentication, exposing key device information. **Recommendations** For Netgear W104 version WAC104-V1.0.4.13, consider restricting access to the 'MNU top.htm' page until a patch is available.

**Name of the Vulnerable Software and Affected Versions** Netgear W104 version WAC104-V1.0.4.13 Netgear WAC104 (affected versions not specified) Netgear R7450 (affected versions not specified) Netgear R6900v2 (affected versions not specified) Netgear R7800 (affected versions not specified) Netgear R6220 (affected versions not specified) **Description** A vulnerability in the 'BRS top.html' page can allow a remote attacker to access this page without any authentication, exposing firmware version information for the device. The issue is related to deficiencies in the authentication procedure when processing the BRS top.html web page. **Recommendations** For Netgear W104 version WAC104-V1.0.4.13, consider restricting access to the BRS top.html page until a patch is available. For Netgear WAC104, R7450, R6900v2, R7800, and R6220, restrict access to the BRS top.html page to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** NETGEAR devices versions AC1450, D8500, DC112A, JNDR3000, LG2200D, R4500, R6200, R6200V2, R6250, R6300, R6300v2, R6400, R6700, R6900P, R6900, R7000P, R7000, R7100LG, R7300, R7900, R8000, R8300, R8500, WGR614v10, WN2500RPv2, WNDR3400v2, WNDR3700v3, WNDR4000, WNDR4500, WNDR4500v2, WNR1000, WNR1000v3, WNR3500L, WNR3500L. **Description** The issue allows remote attackers to disable all authentication requirements by visiting "genieDisableLanChanged.cgi". After that, an attacker can visit "MNU accessPassword recovered.html" to obtain a valid new admin password. **Recommendations** For all affected NETGEAR devices, consider restricting access to the "genieDisableLanChanged.cgi" endpoint until a patch is available. As a temporary workaround, avoid using the affected devices for sensitive operations until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** NETGEAR devices versions MBR1515, MBR1516, DGN2200, DGN2200M, DGND3700, WNR2000v2, WNDR3300, WNDR3400, WNR3500, WNR834Bv2 **Description** The issue allows unauthenticated access to critical .cgi and .htm pages via a substring ending with .jpg. This can be achieved by appending a specific string, such as ?x=1.jpg, to a URL. **Recommendations** For NETGEAR devices versions MBR1515, MBR1516, DGN2200, DGN2200M, DGND3700, WNR2000v2, WNDR3300, WNDR3400, WNR3500, WNR834Bv2, consider restricting access to critical .cgi and .htm pages to prevent unauthenticated access. As a temporary workaround, avoid using URLs that can be manipulated by appending substrings ending with .jpg, such as ?x=1.jpg, until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.