sercomm records
3 published records for vendor sercomm.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')1
- CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')1
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
3 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
44Plan | CVE-2021-27132Proof of concept | SerComm AG Combo VD625 AGSOT_2.1.0 devices allow CRLF injection (for HTTP header injection) in the download function via the Content-Disposisercomm · agcombo vd625 firmware · CWE-74 | Critical9.8 | — | 16.4% | Feb 27, 2021 |
35Monitor | CVE-2021-44080No exploit | A Command Injection vulnerability in httpd web server (setup.cgi) in SerComm h500s, FW: lowi-h500s-v3.4.22 allows logged in administrators tsercomm · h500s firmware · CWE-78 | High7.2 | — | 24.9% | Jun 2, 2022 |
29Monitor | CVE-2021-27702No exploit | Sercomm Router Etisalat Model S3- AC2100 is affected by Incorrect Access Control via the diagnostic utility in the router dashboard.CWE-77 | High7.3 | — | 0.3% | Nov 12, 2024 |
- CVE-2021-2713244Plan
SerComm AG Combo VD625 AGSOT_2.1.0 devices allow CRLF injection (for HTTP header injection) in the download function via the Content-Disposi
CriticalCVSS 9.8Proof of conceptEPSS 16%sercomm · agcombo vd625 firmwareFeb 27, 2021
- CVE-2021-4408035Monitor
A Command Injection vulnerability in httpd web server (setup.cgi) in SerComm h500s, FW: lowi-h500s-v3.4.22 allows logged in administrators t
HighCVSS 7.2No exploitEPSS 24%sercomm · h500s firmwareJun 2, 2022
- CVE-2021-2770229Monitor
Sercomm Router Etisalat Model S3- AC2100 is affected by Incorrect Access Control via the diagnostic utility in the router dashboard.
HighCVSS 7.3No exploitEPSS 0%Nov 12, 2024