beeline records
4 published records for vendor beeline.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 1
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-352 Cross-Site Request Forgery (CSRF)1
- CWE-494 Download of Code Without Integrity Check1
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
4 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
36Monitor | CVE-2020-12246No exploit | Beeline Smart Box 2.0.38 routers allow "Advanced settings > Other > Diagnostics" OS command injection via the Ping ping_ipaddr parameter, thbeeline · smart box firmware · CWE-78 | High8.8 | — | 4.9% | Apr 29, 2020 |
35Monitor | CVE-2021-41426No exploit | Beeline Smart box 2.0.38 is vulnerable to Cross Site Request Forgery (CSRF) via mgt_end_user.htm.beeline · smart box firmware · CWE-352 | High8.8 | — | 0.7% | Nov 10, 2021 |
33Monitor | CVE-2016-6564No exploit | Ragentek Android software contains an over-the-air update mechanism that communicates over an unencrypted channel, which can allow a remote attacker to execute infinixauthority · hot x507 firmware · CWE-494 | High8.1 | — | 2.6% | Jul 13, 2018 |
24Monitor | CVE-2021-41427No exploit | Beeline Smart Box 2.0.38 is vulnerable to Cross Site Scripting (XSS) via the choose_mac parameter to setup.cgi.beeline · smart box firmware · CWE-79 | Medium6.1 | — | 1.1% | Nov 10, 2021 |
- CVE-2020-1224636Monitor
Beeline Smart Box 2.0.38 routers allow "Advanced settings > Other > Diagnostics" OS command injection via the Ping ping_ipaddr parameter, th
HighCVSS 8.8No exploitEPSS 5%beeline · smart box firmwareApr 29, 2020
- CVE-2021-4142635Monitor
Beeline Smart box 2.0.38 is vulnerable to Cross Site Request Forgery (CSRF) via mgt_end_user.htm.
HighCVSS 8.8No exploitEPSS 1%beeline · smart box firmwareNov 10, 2021
- CVE-2016-656433Monitor
Ragentek Android software contains an over-the-air update mechanism that communicates over an unencrypted channel, which can allow a remote attacker to execute
HighCVSS 8.1No exploitEPSS 3%infinixauthority · hot x507 firmwareJul 13, 2018
- CVE-2021-4142724Monitor
Beeline Smart Box 2.0.38 is vulnerable to Cross Site Scripting (XSS) via the choose_mac parameter to setup.cgi.
MediumCVSS 6.1No exploitEPSS 1%beeline · smart box firmwareNov 10, 2021