fsi records
4 published records for vendor fsi.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-352 Cross-Site Request Forgery (CSRF)2
- CWE-522 Insufficiently Protected Credentials1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
4 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
35Monitor | CVE-2018-0520No exploit | Cross-site request forgery (CSRF) vulnerability in FS010W firmware FS010W_00_V1.3.0 and earlier allows an attacker to hijack the authenticatfsi · fs010w firmware · CWE-352 | High8.8 | — | 0.6% | Feb 23, 2018 |
29Monitor | CVE-2022-43470No exploit | Cross-site request forgery (CSRF) vulnerability in +F FS040U software versions v2.3.4 and earlier, +F FS020W software versions v4.0.0 and eafsi · fs040u firmware · CWE-352 | High7.3 | — | 0.2% | Dec 5, 2022 |
19Monitor | CVE-2018-0519No exploit | Cross-site scripting vulnerability in FS010W firmware FS010W_00_V1.3.0 and earlier allows an attacker to inject arbitrary web script or HTMLfsi · fs010w firmware · CWE-79 | Medium4.8 | — | 0.5% | Feb 23, 2018 |
18Monitor | CVE-2022-43442No exploit | Plaintext storage of a password vulnerability exists in +F FS040U software versions v2.3.4 and earlier, which may allow an attacker to obtaifsi · fs040u firmware · CWE-522 | Medium4.6 | — | 0.3% | Dec 5, 2022 |
- CVE-2018-052035Monitor
Cross-site request forgery (CSRF) vulnerability in FS010W firmware FS010W_00_V1.3.0 and earlier allows an attacker to hijack the authenticat
HighCVSS 8.8No exploitEPSS 1%fsi · fs010w firmwareFeb 23, 2018
- CVE-2022-4347029Monitor
Cross-site request forgery (CSRF) vulnerability in +F FS040U software versions v2.3.4 and earlier, +F FS020W software versions v4.0.0 and ea
HighCVSS 7.3No exploitEPSS 0%fsi · fs040u firmwareDec 5, 2022
- CVE-2018-051919Monitor
Cross-site scripting vulnerability in FS010W firmware FS010W_00_V1.3.0 and earlier allows an attacker to inject arbitrary web script or HTML
MediumCVSS 4.8No exploitEPSS 1%fsi · fs010w firmwareFeb 23, 2018
- CVE-2022-4344218Monitor
Plaintext storage of a password vulnerability exists in +F FS040U software versions v2.3.4 and earlier, which may allow an attacker to obtai
MediumCVSS 4.6No exploitEPSS 0%fsi · fs040u firmwareDec 5, 2022