AirTies records
15 published records for vendor airties.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 1 · 6.7%
- Pre-auth RCE
- 1
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')11
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer1
- CWE-352 Cross-Site Request Forgery (CSRF)1
- CWE-639 Authorization Bypass Through User-Controlled Key1
The weakness classes this vendor ships most often: where to look.
CWEAll records
15 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
63This week | CVE-2015-2797Weaponized | Stack-based buffer overflow in AirTies Air 6372, 5760, 5750, 5650TT, 5453, 5444TT, 5443, 5442, 5343, 5342, 5341, and 5021 DSL modems with fiairties · air firmware · CWE-119 | Critical10.0 | — | 77.7% | Jun 19, 2015 |
39Monitor | CVE-2019-6967Proof of concept | AirTies Air5341 1.0.0.12 devices allow cgi-bin/login CSRF.airties · air 5341 firmware · CWE-352 | High8.8 | — | 13.4% | Mar 21, 2019 |
36Monitor | CVE-2022-38789Proof of concept | An issue was discovered in Airties Smart Wi-Fi before 2020-08-04.airties · air 4920 firmware · CWE-639 | Critical9.1 | — | 1.1% | Sep 15, 2022 |
25Monitor | CVE-2018-17588Proof of concept | AirTies Air 5021 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter.airties · air 5021 firmware · CWE-79 | Medium6.1 | — | 2.3% | Oct 2, 2018 |
25Monitor | CVE-2018-17587Proof of concept | AirTies Air 5750 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter.airties · air 5750 firmware · CWE-79 | Medium6.1 | — | 2.3% | Oct 2, 2018 |
25Monitor | CVE-2018-17590Proof of concept | AirTies Air 5442 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter.airties · air 5442 firmware · CWE-79 | Medium6.1 | — | 2.2% | Oct 2, 2018 |
25Monitor | CVE-2018-17593Proof of concept | AirTies Air 5453 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter.airties · air 5453 firmware · CWE-79 | Medium6.1 | — | 2.2% | Oct 2, 2018 |
25Monitor | CVE-2018-17591Proof of concept | AirTies Air 5343v2 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter.airties · air 5343v2 firmware · CWE-79 | Medium6.1 | — | 2.2% | Oct 2, 2018 |
25Monitor | CVE-2018-8738Proof of concept | Airties 5444 1.0.0.18 and 5444TT 1.0.0.18 devices allow XSS.airties · 5444 firmware · CWE-79 | Medium6.1 | — | 2.2% | Jul 5, 2018 |
24Monitor | CVE-2018-17589No exploit | AirTies Air 5650 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter.airties · air 5650 firmware · CWE-79 | Medium6.1 | — | 0.9% | Oct 2, 2018 |
24Monitor | CVE-2018-17594No exploit | AirTies Air 5443v2 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter.airties · air 5443v2 firmware · CWE-79 | Medium6.1 | — | 0.9% | Oct 2, 2018 |
21Monitor | CVE-2012-0902Proof of concept | AirTies Air 4450 1.1.2.18 allows remote attackers to cause a denial of service (reboot) via a direct request to cgi-bin/loader.airties · air 4450 | Medium5.0 | — | 2.7% | Jan 20, 2012 |
18Monitor | CVE-2024-9477No exploit | XSS in AirTies' Air4443 Firmwareairties · air4443 firmware · CWE-79 | Medium4.6 | — | 0.2% | Nov 13, 2024 |
17Monitor | CVE-2015-4679No exploit | Multiple cross-site scripting (XSS) vulnerabilities in the web interface in Airties RT-210 allow remote attackers to inject arbitrary web scairties · rt-210 firmware · CWE-79 | Medium4.3 | — | 1.4% | Jun 19, 2015 |
17Monitor | CVE-2014-100032No exploit | Cross-site scripting (XSS) vulnerability in top.html in the Airties Air 6372 modem allows remote attackers to inject arbitrary web script orairties · air 6372 · CWE-79 | Medium4.3 | — | 1.4% | Jan 13, 2015 |
- CVE-2015-279763This week
Stack-based buffer overflow in AirTies Air 6372, 5760, 5750, 5650TT, 5453, 5444TT, 5443, 5442, 5343, 5342, 5341, and 5021 DSL modems with fi
CriticalCVSS 10.0WeaponizedEPSS 77%airties · air firmwareJun 19, 2015
- CVE-2019-696739Monitor
AirTies Air5341 1.0.0.12 devices allow cgi-bin/login CSRF.
HighCVSS 8.8Proof of conceptEPSS 13%airties · air 5341 firmwareMar 21, 2019
- CVE-2022-3878936Monitor
An issue was discovered in Airties Smart Wi-Fi before 2020-08-04.
CriticalCVSS 9.1Proof of conceptEPSS 1%airties · air 4920 firmwareSep 15, 2022
- CVE-2018-1758825Monitor
AirTies Air 5021 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter.
MediumCVSS 6.1Proof of conceptEPSS 2%airties · air 5021 firmwareOct 2, 2018
- CVE-2018-1758725Monitor
AirTies Air 5750 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter.
MediumCVSS 6.1Proof of conceptEPSS 2%airties · air 5750 firmwareOct 2, 2018
- CVE-2018-1759025Monitor
AirTies Air 5442 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter.
MediumCVSS 6.1Proof of conceptEPSS 2%airties · air 5442 firmwareOct 2, 2018
- CVE-2018-1759325Monitor
AirTies Air 5453 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter.
MediumCVSS 6.1Proof of conceptEPSS 2%airties · air 5453 firmwareOct 2, 2018
- CVE-2018-1759125Monitor
AirTies Air 5343v2 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter.
MediumCVSS 6.1Proof of conceptEPSS 2%airties · air 5343v2 firmwareOct 2, 2018
- CVE-2018-873825Monitor
Airties 5444 1.0.0.18 and 5444TT 1.0.0.18 devices allow XSS.
MediumCVSS 6.1Proof of conceptEPSS 2%airties · 5444 firmwareJul 5, 2018
- CVE-2018-1758924Monitor
AirTies Air 5650 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter.
MediumCVSS 6.1No exploitEPSS 0%airties · air 5650 firmwareOct 2, 2018
- CVE-2018-1759424Monitor
AirTies Air 5443v2 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter.
MediumCVSS 6.1No exploitEPSS 0%airties · air 5443v2 firmwareOct 2, 2018
- CVE-2012-090221Monitor
AirTies Air 4450 1.1.2.18 allows remote attackers to cause a denial of service (reboot) via a direct request to cgi-bin/loader.
MediumCVSS 5.0Proof of conceptEPSS 2%airties · air 4450Jan 20, 2012
- CVE-2024-947718Monitor
XSS in AirTies' Air4443 Firmware
MediumCVSS 4.6No exploitEPSS 0%airties · air4443 firmwareNov 13, 2024
- CVE-2015-467917Monitor
Multiple cross-site scripting (XSS) vulnerabilities in the web interface in Airties RT-210 allow remote attackers to inject arbitrary web sc
MediumCVSS 4.3No exploitEPSS 1%airties · rt-210 firmwareJun 19, 2015
- CVE-2014-10003217Monitor
Cross-site scripting (XSS) vulnerability in top.html in the Airties Air 6372 modem allows remote attackers to inject arbitrary web script or
MediumCVSS 4.3No exploitEPSS 1%airties · air 6372Jan 13, 2015