axesstel kayıtları
axesstel üreticisine ait 11 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Pre-auth RCE: saldırganın hesabı olmadan, ağ üzerinden kod çalıştırabildiği açıklar. Yayından KEV’e ortanca: sahada sömürülen kayıtların yayımlanmasıyla CISA listesine girmesi arasındaki tipik süre.
Tekrar eden sınıflar
- CWE-352 Cross-Site Request Forgery (CSRF)2
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2
- CWE-20 Improper Input Validation2
- CWE-798 Use of Hard-coded Credentials1
- CWE-310 Cryptographic Issues1
- CWE-255 Credentials Management Errors1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
11 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | EPSS · Yayın |
|---|---|---|---|---|
41Planlayın | CVE-2008-3411İstismar yok | The Axesstel AXW-D800 modem with D2_ETH_109_01_VEBR Jun-14-2006 software does not require authentication for (1) etc/config/System.html, (2)axesstel · akw-d800 · CWE-287 | Kritik10,0 | %2,531 Tem 2008 |
41Planlayın | CVE-2009-2317İstismar yok | The Axesstel MV 410R has a certain default administrator password, and does not force a password change, which makes it easier for remote ataxesstel · mv 410r · CWE-255 | Kritik10,0 | %2,15 Tem 2009 |
39İzleyin | CVE-2017-11351İstismar yok | Axesstel MU553S MU55XS-V1.14 devices have a default password of admin for the admin account.axesstel · mu553s firmware · CWE-798 | Kritik9,8 | %1,413 Eyl 2017 |
35İzleyin | CVE-2017-11350İstismar yok | Cross-Site Request Forgery (CSRF) exists in cgi-bin/ConfigSet on Axesstel MU553S MU55XS-V1.14 devices.axesstel · mu553s firmware · CWE-352 | Yüksek8,8 | %0,413 Eyl 2017 |
31İzleyin | CVE-2009-2321İstismar yok | cgi-bin/sysconf.cgi on the Axesstel MV 410R allows remote attackers to cause a denial of service (configuration reset) via a RESTORE=RESTOREaxesstel · mv 410r | Yüksek7,8 | %1,65 Tem 2009 |
31İzleyin | CVE-2009-2318İstismar yok | The Axesstel MV 410R allows remote attackers to cause a denial of service via a flood of SYN packets, a related issue to CVE-1999-0116.axesstel · mv 410r · CWE-20 | Yüksek7,8 | %1,25 Tem 2009 |
30İzleyin | CVE-2009-2320İstismar yok | The web interface on the Axesstel MV 410R relies on client-side JavaScript code to validate input, which allows remote attackers to send craaxesstel · mv 410r · CWE-20 | Yüksek7,5 | %1,15 Tem 2009 |
23İzleyin | CVE-2009-2323İstismar yok | The web interface on the Axesstel MV 410R redirects users back to the referring page after execution of some CGI scripts, which makes it easaxesstel · mv 410r · CWE-352 | Orta5,8 | %0,85 Tem 2009 |
21İzleyin | CVE-2017-13724İstismar yok | On the Axesstel MU553S MU55XS-V1.14, there is a Stored Cross Site Scripting vulnerability in the APN parameter under the "Basic Settings" paaxesstel · mu553s firmware · CWE-79 | Orta5,4 | %0,513 Eyl 2017 |
20İzleyin | CVE-2009-2319İstismar yok | The default configuration of the Wi-Fi component on the Axesstel MV 410R does not use encryption, which makes it easier for remote attackersaxesstel · mv 410r · CWE-310 | Orta5,0 | %0,65 Tem 2009 |
17İzleyin | CVE-2009-2322İstismar yok | Cross-site scripting (XSS) vulnerability in cgi-bin/sysconf.cgi on the Axesstel MV 410R allows remote attackers to inject arbitrary web scriaxesstel · mv 410r · CWE-79 | Orta4,3 | %0,85 Tem 2009 |
- CVE-2008-341141Planlayın
The Axesstel AXW-D800 modem with D2_ETH_109_01_VEBR Jun-14-2006 software does not require authentication for (1) etc/config/System.html, (2)
KritikCVSS 10,0İstismar yokEPSS %2axesstel · akw-d80031 Tem 2008
- CVE-2009-231741Planlayın
The Axesstel MV 410R has a certain default administrator password, and does not force a password change, which makes it easier for remote at
KritikCVSS 10,0İstismar yokEPSS %2axesstel · mv 410r5 Tem 2009
- CVE-2017-1135139İzleyin
Axesstel MU553S MU55XS-V1.14 devices have a default password of admin for the admin account.
KritikCVSS 9,8İstismar yokEPSS %1axesstel · mu553s firmware13 Eyl 2017
- CVE-2017-1135035İzleyin
Cross-Site Request Forgery (CSRF) exists in cgi-bin/ConfigSet on Axesstel MU553S MU55XS-V1.14 devices.
YüksekCVSS 8,8İstismar yokEPSS %0axesstel · mu553s firmware13 Eyl 2017
- CVE-2009-232131İzleyin
cgi-bin/sysconf.cgi on the Axesstel MV 410R allows remote attackers to cause a denial of service (configuration reset) via a RESTORE=RESTORE
YüksekCVSS 7,8İstismar yokEPSS %1axesstel · mv 410r5 Tem 2009
- CVE-2009-231831İzleyin
The Axesstel MV 410R allows remote attackers to cause a denial of service via a flood of SYN packets, a related issue to CVE-1999-0116.
YüksekCVSS 7,8İstismar yokEPSS %1axesstel · mv 410r5 Tem 2009
- CVE-2009-232030İzleyin
The web interface on the Axesstel MV 410R relies on client-side JavaScript code to validate input, which allows remote attackers to send cra
YüksekCVSS 7,5İstismar yokEPSS %1axesstel · mv 410r5 Tem 2009
- CVE-2009-232323İzleyin
The web interface on the Axesstel MV 410R redirects users back to the referring page after execution of some CGI scripts, which makes it eas
OrtaCVSS 5,8İstismar yokEPSS %0axesstel · mv 410r5 Tem 2009
- CVE-2017-1372421İzleyin
On the Axesstel MU553S MU55XS-V1.14, there is a Stored Cross Site Scripting vulnerability in the APN parameter under the "Basic Settings" pa
OrtaCVSS 5,4İstismar yokEPSS %0axesstel · mu553s firmware13 Eyl 2017
- CVE-2009-231920İzleyin
The default configuration of the Wi-Fi component on the Axesstel MV 410R does not use encryption, which makes it easier for remote attackers
OrtaCVSS 5,0İstismar yokEPSS %0axesstel · mv 410r5 Tem 2009
- CVE-2009-232217İzleyin
Cross-site scripting (XSS) vulnerability in cgi-bin/sysconf.cgi on the Axesstel MV 410R allows remote attackers to inject arbitrary web scri
OrtaCVSS 4,3İstismar yokEPSS %0axesstel · mv 410r5 Tem 2009