Skip to content
Noroxi

orange records

8 published records for vendor orange.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 17
  2. 18

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

8 records
  • CVE-2018-20377
    41Plan

    Orange Livebox 00.96.320S devices allow remote attackers to discover Wi-Fi credentials via /get_getnetworkconf.cgi on port 8080, leading to

    CriticalCVSS 9.8Proof of conceptEPSS 8%

    orange · arv7519rw22 livebox 2.1 firmwareDec 23, 2018

  • CVE-2018-18375
    39Monitor

    goform/getProfileList in Orange AirBox Y858_FL_01.16_04 allows attackers to extract APN data (name, number, username, and password) via the

    CriticalCVSS 9.8No exploitEPSS 1%

    orange · airbox firmwareOct 15, 2018

  • CVE-2014-3150
    36Monitor

    Livebox 1.1 allows remote authenticated users to upload arbitrary configuration files, download the configuration file, or obtain sensitive

    HighCVSS 8.8No exploitEPSS 2%

    orange · livebox 1.1 firmwareNov 15, 2017

  • CVE-2018-20577
    36Monitor

    Orange Livebox 00.96.320S devices allow cgi-bin/restore.exe, cgi-bin/firewall_SPI.exe, cgi-bin/setup_remote_mgmt.exe, cgi-bin/setup_pass.exe

    CriticalCVSS 9.1No exploitEPSS 1%

    orange · arv7519rw22 livebox 2.1 firmwareDec 28, 2018

  • CVE-2018-18376
    30Monitor

    goform/getWlanClientInfo in Orange AirBox Y858_FL_01.16_04 allows remote attackers to discover information about currently connected devices

    HighCVSS 7.5No exploitEPSS 2%

    orange · airbox firmwareOct 15, 2018

  • CVE-2018-20575
    30Monitor

    Orange Livebox 00.96.320S devices have an undocumented /system_firmwarel.stm URI for manual firmware update.

    HighCVSS 7.5No exploitEPSS 1%

    orange · arv7519rw22 livebox 2.1 firmwareDec 28, 2018

  • CVE-2018-18377
    30Monitor

    goform/setReset on Orange AirBox Y858_FL_01.16_04 devices allows attackers to reset a router to factory settings, which can be used to login

    HighCVSS 7.5No exploitEPSS 1%

    orange · airbox firmwareOct 15, 2018

  • CVE-2018-20576
    21Monitor

    Orange Livebox 00.96.320S devices allow cgi-bin/autodialing.exe and cgi-bin/phone_test.exe CSRF, leading to arbitrary outbound telephone cal

    MediumCVSS 5.4No exploitEPSS 0%

    orange · arv7519rw22 livebox 2.1 firmwareDec 28, 2018