CVE Intelligence

Allnet All-rut22gw Firmware vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Allnet All-rut22gw Firmware: 2 record(s), with affected versions and fixes.
cpe:2.3:o:allnet:all-rut22gw_firmware

CVE-2025-29269 Critical · 9.8 CWE-78 Dec 4, 2025
OS Command Injection in Allnet All-rut22gw Firmware
ALLNET ALL-RUT22GW v3.3.8 was discovered to contain an OS command injection vulnerability via the command parameter in the popen.cgi endpoint.
CVE-2025-29268 Critical · 9.8 CWE-798 Dec 4, 2025
Use of Hard-coded Credentials in Allnet All-rut22gw Firmware
ALLNET ALL-RUT22GW v3.3.8 was discovered to store hardcoded credentials in the libicos.so library.