← Back

Allnet

allnet

3 CVEs • 4 products

Products (4)

Click to collapse
Toggle
All Rut22gw Firmware
all-rut22gw_firmware
2 CVEs
All Wr0500ac Firmware
all-wr0500ac_firmware
1 CVE
All Wr0500ac
all-wr0500ac
0 CVEs
All Rut22gw
all-rut22gw
0 CVEs

CVEs (3)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2025-29269
1Allnet
1All Rut22gw Firmware
Dec 16, 2025
Dec 4, 2025
N/A· v4
9.8 CRITICAL· v3
N/A· v2
ALLNET ALL-RUT22GW v3.3.8 was discovered to contain an OS command injection vulnerability via the command parameter in the popen.cgi endpoint.
CVE-2025-29268
1Allnet
1All Rut22gw Firmware
Dec 16, 2025
Dec 4, 2025
N/A· v4
9.8 CRITICAL· v3
N/A· v2
ALLNET ALL-RUT22GW v3.3.8 was discovered to store hardcoded credentials in the libicos.so library.
CVE-2022-34767
1Allnet
1All Wr0500ac Firmware
Nov 21, 2024
Jul 21, 2022
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Web page which "wizardpwd.asp" ALLNET Router model WR0500AC is prone to Authorization bypass vulnerability – the password, located at "admin" allows changing the http[s]://wizardpwd.asp/cgi-bin. Does not validate the use...Show more
Web page which "wizardpwd.asp" ALLNET Router model WR0500AC is prone to Authorization bypass vulnerability – the password, located at "admin" allows changing the http[s]://wizardpwd.asp/cgi-bin. Does not validate the user's identity and can be accessed publicly.Show less