MetaData

18 credited records · 0 in the last 12 months · 0 in CISA KEV

Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.

Credited records

Researchers

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
26Monitor	CVE-2023-37216No exploit	AnaSystem SensMini M4 – an authenticated user can cause Denial of Serviceanasystem · sensmini m4 firmware Denial of service	Medium6.5	—	0.6%	Jul 30, 2023
30Monitor	CVE-2023-24498No exploit	Netgear ProSAFE 24 Port 10/100 FS726TP - CWE-522: Insufficiently Protected Credentials.netgear · prosafe fs726tp firmware · CWE-522 Pre-auth Info leak	High7.5	—	0.6%	Feb 15, 2023
35Monitor	CVE-2022-46372No exploit	Alotcer - AR7088H-A Authenticated Command executionalotceriot · ar7088h-a firmware · CWE-20 RCE	High8.8	—	0.9%	Jan 12, 2023
21Monitor	CVE-2022-46371No exploit	Alotcer - AR7088H-A Information disclosurealotceriot · ar7088h-a firmware · CWE-200 Pre-auth Info leak	Medium5.3	—	0.5%	Jan 12, 2023
22Monitor	CVE-2022-39186No exploit	EXFO - BV-10 Performance Endpoint Unit Misconfigurationexfo · bv-10 firmware · CWE-732	Medium5.5	—	0.2%	Jan 12, 2023
39Monitor	CVE-2022-39185No exploit	EXFO - BV-10 Performance Endpoint Unit Undocumented privileged user.exfo · bv-10 firmware · CWE-798 Pre-auth Hard-coded credentials	Critical9.8	—	0.6%	Jan 12, 2023
39Monitor	CVE-2022-39184No exploit	EXFO - BV-10 Performance Endpoint Unit Authentication bypassexfo · bv-10 firmware · CWE-287 Pre-auth Auth bypass	Critical9.8	—	0.8%	Jan 12, 2023
31Monitor	CVE-2022-36785No exploit	D-Link – G integrated Access Device4 Information Disclosure & Authorization Bypass.dlink · g integrated access device4 firmware · CWE-863 Pre-auth Broken access control (IDOR)	High7.5	—	2.0%	Nov 17, 2022
40Plan	CVE-2022-36779Proof of concept	PROSCEND - PROSCEND / ADVICE .Ltd - G/5G Industrial Cellular Router (with GPS)4 Unauthenticated OS Command Injectionproscend · m330-w firmware · CWE-78 pre-auth RCE Command injection	Critical9.8	—	2.9%	Sep 13, 2022
39Monitor	CVE-2022-34767No exploit	ALLNET Gmbh - ADSL/VDSL Router inkl. Modem and Wlan Authorization Bypassallnet · all-wr0500ac firmware · CWE-306 Pre-auth Auth bypass	Critical9.8	—	0.6%	Jul 21, 2022
30Monitor	CVE-2022-30627No exploit	Chcnav - P5E GNSS Information disclosure hard coded credentials.chcnav · p5e gnss firmware · CWE-798 Pre-auth Hard-coded credentials	High7.5	—	0.3%	Jul 18, 2022
30Monitor	CVE-2022-30626No exploit	Chcnav - P5E GNSS API not securechcnav · p5e gnss firmware · CWE-312 Pre-auth	High7.5	—	0.2%	Jul 18, 2022
21Monitor	CVE-2022-30625No exploit	Chcnav - P5E GNSS Directory listingchcnav · p5e gnss firmware · CWE-548 Pre-auth	Medium5.3	—	0.3%	Jul 18, 2022
30Monitor	CVE-2022-30624No exploit	Chcnav - P5E GNSS Authentication bypass admin password resetchcnav · p5e gnss firmware · CWE-287 Pre-auth Auth bypass	High7.5	—	0.3%	Jul 18, 2022
39Monitor	CVE-2022-30623No exploit	Chcnav - P5E GNSS Authentication bypasschcnav · p5e gnss firmware · CWE-288 Pre-auth Auth bypass	Critical9.8	—	0.4%	Jul 18, 2022
26Monitor	CVE-2022-30621No exploit	Cellinx NVT – IP PTZ Camera local file inclusioncellinx · cellinx nvt - ip ptz camera firmware · CWE-706	Medium6.5	—	0.7%	Jul 18, 2022
35Monitor	CVE-2022-30620No exploit	Cellinx NVT – IP PTZ Camera Privilege Escalationcellinx · cellinx nvt - ip ptz camera firmware · CWE-565	High8.8	—	0.5%	Jul 18, 2022
29Monitor	CVE-2022-30622No exploit	Chcnav - P5E GNSS Information disclosurechcnav · p5e gnss firmware · CWE-798 Hard-coded credentials	High7.3	—	0.2%	Jul 17, 2022

CVE-2023-37216
26Monitor
AnaSystem SensMini M4 – an authenticated user can cause Denial of Service
MediumCVSS 6.5No exploitEPSS 1%
- Denial of service
anasystem · sensmini m4 firmwareJul 30, 2023
CVE-2023-24498
30Monitor
Netgear ProSAFE 24 Port 10/100 FS726TP - CWE-522: Insufficiently Protected Credentials.
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
- Info leak
netgear · prosafe fs726tp firmwareFeb 15, 2023
CVE-2022-46372
35Monitor
Alotcer - AR7088H-A Authenticated Command execution
HighCVSS 8.8No exploitEPSS 1%
- RCE
alotceriot · ar7088h-a firmwareJan 12, 2023
CVE-2022-46371
21Monitor
Alotcer - AR7088H-A Information disclosure
MediumCVSS 5.3No exploitEPSS 0%
- Pre-auth
- Info leak
alotceriot · ar7088h-a firmwareJan 12, 2023
CVE-2022-39186
22Monitor
EXFO - BV-10 Performance Endpoint Unit Misconfiguration
MediumCVSS 5.5No exploitEPSS 0%
exfo · bv-10 firmwareJan 12, 2023
CVE-2022-39185
39Monitor
EXFO - BV-10 Performance Endpoint Unit Undocumented privileged user.
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- Hard-coded credentials
exfo · bv-10 firmwareJan 12, 2023
CVE-2022-39184
39Monitor
EXFO - BV-10 Performance Endpoint Unit Authentication bypass
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- Auth bypass
exfo · bv-10 firmwareJan 12, 2023
CVE-2022-36785
31Monitor
D-Link – G integrated Access Device4 Information Disclosure & Authorization Bypass.
HighCVSS 7.5No exploitEPSS 2%
- Pre-auth
- Broken access control (IDOR)
dlink · g integrated access device4 firmwareNov 17, 2022
CVE-2022-36779
40Plan
PROSCEND - PROSCEND / ADVICE .Ltd - G/5G Industrial Cellular Router (with GPS)4 Unauthenticated OS Command Injection
CriticalCVSS 9.8Proof of conceptEPSS 3%
- pre-auth RCE
- Command injection
proscend · m330-w firmwareSep 13, 2022
CVE-2022-34767
39Monitor
ALLNET Gmbh - ADSL/VDSL Router inkl. Modem and Wlan Authorization Bypass
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- Auth bypass
allnet · all-wr0500ac firmwareJul 21, 2022
CVE-2022-30627
30Monitor
Chcnav - P5E GNSS Information disclosure hard coded credentials.
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Hard-coded credentials
chcnav · p5e gnss firmwareJul 18, 2022
CVE-2022-30626
30Monitor
Chcnav - P5E GNSS API not secure
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
chcnav · p5e gnss firmwareJul 18, 2022
CVE-2022-30625
21Monitor
Chcnav - P5E GNSS Directory listing
MediumCVSS 5.3No exploitEPSS 0%
- Pre-auth
chcnav · p5e gnss firmwareJul 18, 2022
CVE-2022-30624
30Monitor
Chcnav - P5E GNSS Authentication bypass admin password reset
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Auth bypass
chcnav · p5e gnss firmwareJul 18, 2022
CVE-2022-30623
39Monitor
Chcnav - P5E GNSS Authentication bypass
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Auth bypass
chcnav · p5e gnss firmwareJul 18, 2022
CVE-2022-30621
26Monitor
Cellinx NVT – IP PTZ Camera local file inclusion
MediumCVSS 6.5No exploitEPSS 1%
cellinx · cellinx nvt - ip ptz camera firmwareJul 18, 2022
CVE-2022-30620
35Monitor
Cellinx NVT – IP PTZ Camera Privilege Escalation
HighCVSS 8.8No exploitEPSS 1%
cellinx · cellinx nvt - ip ptz camera firmwareJul 18, 2022
CVE-2022-30622
29Monitor
Chcnav - P5E GNSS Information disclosure
HighCVSS 7.3No exploitEPSS 0%
- Hard-coded credentials
chcnav · p5e gnss firmwareJul 17, 2022