smc records
3 published records for vendor smc.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 1
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-20 Improper Input Validation1
- CWE-287 Improper Authentication1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
3 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
41Plan | CVE-2020-8087No exploit | SMC Networks D3G0804W D3GNV5M-3.5.1.6.10_GA devices allow remote command execution by leveraging access to the Network Diagnostic Tools scresmc · d3g0804w firmware · CWE-20 | Critical9.8 | — | 6.3% | Jan 27, 2020 |
41Plan | CVE-2012-2974No exploit | The web interface on the SMC SMC8024L2 switch allows remote attackers to bypass authentication and obtain administrative access via a directsmc · smc8024l2 switch · CWE-287 | Critical10.0 | — | 2.6% | Jul 19, 2012 |
19Monitor | CVE-2020-7249No exploit | SMC D3G0804W 3.5.2.5-LAT_GA devices allow XSS via the SSID field on the WiFi Network Configuration page (after a successful login to the admsmc · d3g0804 firmware · CWE-79 | Medium4.8 | — | 0.6% | Jan 20, 2020 |
- CVE-2020-808741Plan
SMC Networks D3G0804W D3GNV5M-3.5.1.6.10_GA devices allow remote command execution by leveraging access to the Network Diagnostic Tools scre
CriticalCVSS 9.8No exploitEPSS 6%smc · d3g0804w firmwareJan 27, 2020
- CVE-2012-297441Plan
The web interface on the SMC SMC8024L2 switch allows remote attackers to bypass authentication and obtain administrative access via a direct
CriticalCVSS 10.0No exploitEPSS 3%smc · smc8024l2 switchJul 19, 2012
- CVE-2020-724919Monitor
SMC D3G0804W 3.5.2.5-LAT_GA devices allow XSS via the SSID field on the WiFi Network Configuration page (after a successful login to the adm
MediumCVSS 4.8No exploitEPSS 1%smc · d3g0804 firmwareJan 20, 2020