CVE-2018-6021

Silex SD-320AN version 2.01 and prior and GE MobileLink(GEH-SD-320AN) version GEH-1.1 and prior have a system call parameter that is not properly sanitized, which may allow remote code execution.

• CWE-78

• https://ics-cert.us-cert.gov/advisories/ICSMA-18-128-01Third Party Advisory, US Government Resource
• https://ics-cert.us-cert.gov/advisories/ICSMA-18-128-01Third Party Advisory, US Government Resource

Published

May 9, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-6015An issue was discovered in the "Email Subscribers & Newslett…
• CVE-2018-6016Unquoted Windows search path vulnerability in the srvInvento…
• CVE-2018-6017Unencrypted transmission of images in Tinder iOS app and Tin…
• CVE-2018-6018Fixed sizes of HTTPS responses in Tinder iOS app and Tinder …
• CVE-2018-6019Samsung Display Solutions App before 3.02 for Android allows…
• CVE-2018-6020In Silex SX-500 all versions and GE MobileLink(GEH-500) vers…
• CVE-2018-6022Directory traversal vulnerability in application/admin/contr…
• CVE-2018-6023Fastweb FASTgate 0.00.47 devices are vulnerable to CSRF, wit…
• CVE-2018-6024SQL Injection exists in the Project Log 1.5.3 component for …
• CVE-2018-6029The copy function in application/admin/controller/Article.ph…
• CVE-2018-6031Use after free in PDFium in Google Chrome prior to 64.0.3282…
• CVE-2018-6032Insufficient policy enforcement in Blink in Google Chrome pr…