Teldat records
3 published records for vendor teldat.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
- CWE-521 Weak Password Requirements1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
3 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
32Monitor | CVE-2022-39997No exploit | A weak password requirement issue was discovered in Teldats Router RS123, RS123w allows a remote attacker to escalate privilegesCWE-521 | High8.0 | — | 0.2% | Aug 27, 2024 |
30Monitor | CVE-2024-36829No exploit | Incorrect access control in Teldat M1 v11.00.05.50.01 allows attackers to obtain sensitive information via a crafted query string.teldat · m1 firmware · CWE-200 | High7.5 | — | 0.3% | Jun 26, 2024 |
19Monitor | CVE-2022-39996Proof of concept | Cross Site Scripting vulnerability in Teldats Router RS123, RS123w allows attacker to execute arbitrary code via the cmdcookie parameter to teldat · rs123 firmware · CWE-79 | Medium4.8 | — | 0.3% | Aug 27, 2024 |
- CVE-2022-3999732Monitor
A weak password requirement issue was discovered in Teldats Router RS123, RS123w allows a remote attacker to escalate privileges
HighCVSS 8.0No exploitEPSS 0%Aug 27, 2024
- CVE-2024-3682930Monitor
Incorrect access control in Teldat M1 v11.00.05.50.01 allows attackers to obtain sensitive information via a crafted query string.
HighCVSS 7.5No exploitEPSS 0%teldat · m1 firmwareJun 26, 2024
- CVE-2022-3999619Monitor
Cross Site Scripting vulnerability in Teldats Router RS123, RS123w allows attacker to execute arbitrary code via the cmdcookie parameter to
MediumCVSS 4.8Proof of conceptEPSS 0%teldat · rs123 firmwareAug 27, 2024