airlive records

2 published records for vendor airlive.

Researcher profile

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

2 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
54Plan	CVE-2014-8389No exploit	cgi-bin/mft/wireless_mft.cgi in AirLive BU-2015 with firmware 1.03.18 16.06.2014, AirLive BU-3026 with firmware 1.43 21.08.2014, AirLive MD-airlive · bu-3026 firmware · CWE-78 pre-auth RCE Hard-coded credentials Command injection	Critical9.8	—	51.4%	Dec 27, 2017
44Plan	CVE-2015-2279Proof of concept	cgi_test.cgi in AirLive BU-2015 with firmware 1.03.18, BU-3026 with firmware 1.43, and MD-3025 with firmware 1.81 allows remote attackers toairlive · bu-2015 firmware · CWE-78 pre-auth RCE Command injection	Critical9.8	—	17.6%	Jul 24, 2017

CVE-2014-8389
54Plan
cgi-bin/mft/wireless_mft.cgi in AirLive BU-2015 with firmware 1.03.18 16.06.2014, AirLive BU-3026 with firmware 1.43 21.08.2014, AirLive MD-
CriticalCVSS 9.8No exploitEPSS 51%
airlive · bu-3026 firmwareDec 27, 2017
CVE-2015-2279
44Plan
cgi_test.cgi in AirLive BU-2015 with firmware 1.03.18, BU-3026 with firmware 1.43, and MD-3025 with firmware 1.81 allows remote attackers to
CriticalCVSS 9.8Proof of conceptEPSS 17%
- pre-auth RCE
- Command injection
airlive · bu-2015 firmwareJul 24, 2017