ee kayıtları
ee üreticisine ait 5 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
- CWE-352 Cross-Site Request Forgery (CSRF)1
- CWE-732 Incorrect Permission Assignment for Critical Resource1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
- CWE-798 Use of Hard-coded Credentials1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
5 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2017-14269İstismar yok | EE 4GEE WiFi MBB (before EE60_00_05.00_31) devices allow remote attackers to obtain sensitive information via a JSONP endpoint, as demonstraee · 4gee wifi mbb firmware · CWE-200 | Kritik9,8 | — | %1,6 | 11 Eyl 2017 |
36İzleyin | CVE-2018-10532İstismar yok | An issue was discovered on EE 4GEE HH70VB-2BE8GB3 HH70_E1_02.00_19 devices.ee · 4gee firmware · CWE-798 | Yüksek8,8 | — | %2,4 | 30 Eki 2018 |
35İzleyin | CVE-2017-14267İstismar yok | EE 4GEE WiFi MBB (before EE60_00_05.00_31) devices have CSRF, related to goform/AddNewProfile, goform/setWanDisconnect, goform/setSMSAutoRedee · 4gee wifi mbb firmware · CWE-352 | Yüksek8,8 | — | %0,7 | 11 Eyl 2017 |
32İzleyin | CVE-2018-14327Kavram kanıtı | The installer for the Alcatel OSPREY3_MINI Modem component on EE EE40VB 4G mobile broadband modems with firmware before EE40_00_02.00_45 setee · ee40vb firmware · CWE-732 | Yüksek7,8 | — | %4,4 | 26 Eyl 2018 |
24İzleyin | CVE-2017-14268İstismar yok | EE 4GEE WiFi MBB (before EE60_00_05.00_31) devices have XSS in the sms_content parameter in a getSMSlist request.ee · 4gee wifi mbb firmware · CWE-79 | Orta6,1 | — | %0,7 | 11 Eyl 2017 |
- CVE-2017-1426939İzleyin
EE 4GEE WiFi MBB (before EE60_00_05.00_31) devices allow remote attackers to obtain sensitive information via a JSONP endpoint, as demonstra
KritikCVSS 9,8İstismar yokEPSS %2ee · 4gee wifi mbb firmware11 Eyl 2017
- CVE-2018-1053236İzleyin
An issue was discovered on EE 4GEE HH70VB-2BE8GB3 HH70_E1_02.00_19 devices.
YüksekCVSS 8,8İstismar yokEPSS %2ee · 4gee firmware30 Eki 2018
- CVE-2017-1426735İzleyin
EE 4GEE WiFi MBB (before EE60_00_05.00_31) devices have CSRF, related to goform/AddNewProfile, goform/setWanDisconnect, goform/setSMSAutoRed
YüksekCVSS 8,8İstismar yokEPSS %1ee · 4gee wifi mbb firmware11 Eyl 2017
- CVE-2018-1432732İzleyin
The installer for the Alcatel OSPREY3_MINI Modem component on EE EE40VB 4G mobile broadband modems with firmware before EE40_00_02.00_45 set
YüksekCVSS 7,8Kavram kanıtıEPSS %4ee · ee40vb firmware26 Eyl 2018
- CVE-2017-1426824İzleyin
EE 4GEE WiFi MBB (before EE60_00_05.00_31) devices have XSS in the sms_content parameter in a getSMSlist request.
OrtaCVSS 6,1İstismar yokEPSS %1ee · 4gee wifi mbb firmware11 Eyl 2017