Deviceways

Wireless access point

EnGenius ENS620EXT

Contribute

Projects for this device

Replacement firmware

Replace router software with a customizable system for network controls and community packages.

How to get started

Follow the guide for your exact router version. The first installation may use its web interface, recovery mode or a serial connection.

Setup
Firmware replacement; route varies by router
You’ll need
Exact hardware revision, an appropriate OpenWrt release and its model-specific installation guide.
V1.0.0
Retired support documentedOpen device guide
V1.0.0
Open hardware record
Original project github.com

Recorded configuration: 32 MB flash; 256 MB RAM

Device support in source
Retired; check the documented hardware and older release resources.
Sources

Features & details

Check the project and hardware shown for each feature.

Device details

engenius ens620ext — device documentation (github.com)Device details — Source documentation (openwrt.org)

Hardware revision
V1.0.0

OpenWrt · V1.0.0

OpenWrt · V1.0.0 — Source documentation (openwrt.org)

Availability recorded by source
Discontinued 2023

Hardware details

Security

Saved scan

From our saved security research.

Model advisories

Selected highlights

Prioritized by known exploitation, severity, then date.

CVE published

CVSS 5.1 (v4.0)

ENS620EXT

EnGenius ENH1350EXT/ENS500-AC/ENS620EXT diag_iperf command injection

CVE-2024-11659

Affected firmware
20241118
Fix
Fix details in the linked record
Read VulDB CVE record
Details and sources
CVE updated

A vulnerability was found in EnGenius ENH1350EXT, ENS500-AC and ENS620EXT up to 20241118 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/network/diag_iperf. The manipulation of the argument iperf leads to command injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

VDB-285980 | EnGenius ENH1350EXT/ENS500-AC/ENS620EXT diag_iperf command injection — ENS620EXT (vuldb.com) ↗VDB-285980 | CTI Indicators (IOB, IOC, TTP, IOA) — ENS620EXT (vuldb.com) ↗Submit #446642 | EnGenius ENS500-AC 3.7.20 Command Injection — ENS620EXT (vuldb.com) ↗
CVE published

CVSS 5.1 (v4.0)

ENS620EXT

EnGenius ENH1350EXT/ENS500-AC/ENS620EXT ajax_getChannelList command injection

CVE-2024-11658

Affected firmware
20241118
Fix
Fix details in the linked record
Read VulDB CVE record
Details and sources
CVE updated

A vulnerability has been found in EnGenius ENH1350EXT, ENS500-AC and ENS620EXT up to 20241118 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/network/ajax_getChannelList. The manipulation of the argument countryCode leads to command injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

VDB-285979 | EnGenius ENH1350EXT/ENS500-AC/ENS620EXT ajax_getChannelList command injection — ENS620EXT (vuldb.com) ↗VDB-285979 | CTI Indicators (IOB, IOC, TTP, IOA) — ENS620EXT (vuldb.com) ↗Submit #446641 | EnGenius ENS500-AC 3.7.20 Command Injection — ENS620EXT (vuldb.com) ↗
CVE published

CVSS 5.1 (v4.0)

ENS620EXT

EnGenius ENH1350EXT/ENS500-AC/ENS620EXT diag_nslookup command injection

CVE-2024-11657

Affected firmware
20241118
Fix
Fix details in the linked record
Read VulDB CVE record
Details and sources
CVE updated

A vulnerability, which was classified as critical, was found in EnGenius ENH1350EXT, ENS500-AC and ENS620EXT up to 20241118. Affected is an unknown function of the file /admin/network/diag_nslookup. The manipulation of the argument diag_nslookup leads to command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

VDB-285978 | EnGenius ENH1350EXT/ENS500-AC/ENS620EXT diag_nslookup command injection — ENS620EXT (vuldb.com) ↗VDB-285978 | CTI Indicators (IOB, IOC, TTP, IOA) — ENS620EXT (vuldb.com) ↗Submit #446640 | EnGenius ENS500-AC 3.7.20 Command Injection — ENS620EXT (vuldb.com) ↗
CVE published

CVSS 5.1 (v4.0)

ENS620EXT

EnGenius ENH1350EXT/ENS500-AC/ENS620EXT diag_ping6 command injection

CVE-2024-11656

Affected firmware
20241118
Fix
Fix details in the linked record
Read VulDB CVE record
Details and sources
CVE updated

A vulnerability, which was classified as critical, has been found in EnGenius ENH1350EXT, ENS500-AC and ENS620EXT up to 20241118. This issue affects some unknown processing of the file /admin/network/diag_ping6. The manipulation of the argument diag_ping6 leads to command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

VDB-285977 | EnGenius ENH1350EXT/ENS500-AC/ENS620EXT diag_ping6 command injection — ENS620EXT (vuldb.com) ↗VDB-285977 | CTI Indicators (IOB, IOC, TTP, IOA) — ENS620EXT (vuldb.com) ↗Submit #446639 | EnGenius ENS500-AC 3.7.20 Command Injection — ENS620EXT (vuldb.com) ↗
CVE published

CVSS 5.1 (v4.0)

ENS620EXT

EnGenius ENH1350EXT/ENS500-AC/ENS620EXT diag_pinginterface command injection

CVE-2024-11655

Affected firmware
20241118
Fix
Fix details in the linked record
Read VulDB CVE record
Details and sources
CVE updated

A vulnerability classified as critical was found in EnGenius ENH1350EXT, ENS500-AC and ENS620EXT up to 20241118. This vulnerability affects unknown code of the file /admin/network/diag_pinginterface. The manipulation of the argument diag_ping leads to command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

VDB-285976 | EnGenius ENH1350EXT/ENS500-AC/ENS620EXT diag_pinginterface command injection — ENS620EXT (vuldb.com) ↗VDB-285976 | CTI Indicators (IOB, IOC, TTP, IOA) — ENS620EXT (vuldb.com) ↗Submit #446638 | EnGenius ENS500-AC 3.7.20 Command Injection — ENS620EXT (vuldb.com) ↗
Check more security advisories for this device · CVE.org