İçeriğe atla
Noroxi

Comfast kayıtları

comfast üreticisine ait 22 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
8
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 23
  2. 24
  3. 25
  4. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

22 kayıt
  • CVE-2024-44466
    42Planlayın

    COMFAST CF-XR11 V2.7.2 has a command injection vulnerability in function sub_424CB4.

    KritikCVSS 9,8İstismar yokEPSS %11

    comfast · cf-xr11 firmware11 Eyl 2024

  • CVE-2023-38865
    40Planlayın

    COMFAST CF-XR11 V2.7.2 has a command injection vulnerability detected at function sub_4143F0.

    KritikCVSS 9,8İstismar yokEPSS %2

    comfast · cf-xr11 firmware15 Ağu 2023

  • CVE-2023-38866
    40Planlayın

    COMFAST CF-XR11 V2.7.2 has a command injection vulnerability detected at function sub_415588.

    KritikCVSS 9,8İstismar yokEPSS %2

    comfast · cf-xr11 firmware15 Ağu 2023

  • CVE-2023-38863
    39İzleyin

    An issue in COMFAST CF-XR11 v.2.7.2 allows an attacker to execute arbitrary code via the ifname and mac parameters in the sub_410074 functio

    KritikCVSS 9,8İstismar yokEPSS %1

    comfast · cf-xr11 firmware15 Ağu 2023

  • CVE-2023-38862
    39İzleyin

    An issue in COMFAST CF-XR11 v.2.7.2 allows an attacker to execute arbitrary code via the destination parameter of sub_431F64 function in bin

    KritikCVSS 9,8İstismar yokEPSS %1

    comfast · cf-xr11 firmware15 Ağu 2023

  • CVE-2023-38864
    39İzleyin

    An issue in COMFAST CF-XR11 v.2.7.2 allows an attacker to execute arbitrary code via the protal_delete_picname parameter in the sub_41171C f

    KritikCVSS 9,8İstismar yokEPSS %1

    comfast · cf-xr11 firmware15 Ağu 2023

  • CVE-2022-45725
    37İzleyin

    Improper Input Validation in Comfast router CF-WR6110N V2.3.1 allows a remote attacker on the same network to execute arbitrary code on the

    YüksekCVSS 8,8İstismar yokEPSS %7

    comfast · cf-wr610n firmware13 Şub 2023

  • CVE-2025-57293
    36İzleyin

    A command injection vulnerability in COMFAST CF-XR11 (firmware V2.7.2) exists in the multi_pppoe API, processed by the sub_423930 function i

    YüksekCVSS 8,8İstismar yokEPSS %2

    comfast · cf-xr11 firmware18 Eyl 2025

  • CVE-2023-30310
    30İzleyin

    An issue discovered in Comfast Comfast CF-616AC routers allows attackers to hijack TCP sessions which could lead to a denial of service.

    YüksekCVSS 7,5İstismar yokEPSS %0

    28 May 2024

  • CVE-2022-45724
    21İzleyin

    Incorrect Access Control in Comfast router CF-WR6110N V2.3.1 allows a remote attacker on the same network to perform any HTTP request to an

    OrtaCVSS 5,4İstismar yokEPSS %1

    comfast · cf-wr610n firmware13 Şub 2023

  • CVE-2026-2537
    16İzleyin

    Comfast CF-E4 HTTP POST Request mbox-config command injection

    DüşükCVSS 2,0İstismar yokEPSS %25

    comfast · cf-e4 firmware16 Şub 2026

  • CVE-2026-2535
    12İzleyin

    Comfast CF-N1 V2 mbox-config sub_44AB9C command injection

    DüşükCVSS 2,1İstismar yokEPSS %14

    comfast · cf-n1 firmware16 Şub 2026

  • CVE-2026-2534
    12İzleyin

    Comfast CF-N1 V2 mbox-config sub_44AC4C command injection

    DüşükCVSS 2,1İstismar yokEPSS %14

    comfast · cf-n1 firmware16 Şub 2026

  • CVE-2026-2823
    11İzleyin

    Comfast CF-E7 webmggnt mbox-config sub_41ACCC command injection

    DüşükCVSS 2,1İstismar yokEPSS %11

    comfast · cf-e7 firmware20 Şub 2026

  • CVE-2026-2824
    11İzleyin

    Comfast CF-E7 webmggnt mbox-config sub_441CF4 command injection

    DüşükCVSS 2,1İstismar yokEPSS %11

    comfast · cf-e7 firmware20 Şub 2026

  • CVE-2026-3798
    11İzleyin

    Comfast CF-AC100 Request Path mbox-config sub_44AC14 command injection

    DüşükCVSS 2,0İstismar yokEPSS %11

    comfast · cf-ac100 firmware9 Mar 2026

  • CVE-2025-9586
    10İzleyin

    Comfast CF-N1 webmgnt wireless_device_dissoc command injection

    DüşükCVSS 2,1İstismar yokEPSS %8

    comfast · cf-n1 firmware28 Ağu 2025

  • CVE-2025-9584
    10İzleyin

    Comfast CF-N1 webmgnt update_interface_png command injection

    DüşükCVSS 2,1İstismar yokEPSS %8

    comfast · cf-n1 firmware28 Ağu 2025

  • CVE-2025-9582
    10İzleyin

    Comfast CF-N1 webmgnt ntp_timezone command injection

    DüşükCVSS 2,1İstismar yokEPSS %5

    comfast · cf-n1 firmware28 Ağu 2025

  • CVE-2025-9581
    10İzleyin

    Comfast CF-N1 webmgnt multi_pppoe command injection

    DüşükCVSS 2,1İstismar yokEPSS %5

    comfast · cf-n1 firmware28 Ağu 2025

  • CVE-2025-9585
    10İzleyin

    Comfast CF-N1 webmgnt wifilith_delete_pic_file command injection

    DüşükCVSS 2,1İstismar yokEPSS %5

    comfast · cf-n1 firmware28 Ağu 2025

  • CVE-2025-9583
    10İzleyin

    Comfast CF-N1 webmgnt ping_config command injection

    DüşükCVSS 2,1İstismar yokEPSS %5

    comfast · cf-n1 firmware28 Ağu 2025