jio kayıtları
jio üreticisine ait 7 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3
- CWE-352 Cross-Site Request Forgery (CSRF)2
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWESaldırı profili
Tüm kayıtlar
7 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
40Planlayın | CVE-2019-7745İstismar yok | JioFi 4 jmr1140 Amtel_JMR1140_R12.07 devices allow remote attackers to obtain the Wi-Fi password by making a cgi-bin/qcmap_web_cgi Page=GetWjio · jmr1140 firmware | Kritik9,8 | — | %3,8 | 7 May 2019 |
32İzleyin | CVE-2019-7746İstismar yok | JioFi 4 jmr1140 Amtel_JMR1140_R12.07 devices allow remote attackers to obtain an admin token by making a /cgi-bin/qcmap_auth type=getuser rejio · jmr1140 firmware · CWE-352 | Yüksek8,1 | — | %1,1 | 7 May 2019 |
28İzleyin | CVE-2018-15181Kavram kanıtı | JioFi 4G Hotspot M2S devices allow attackers to cause a denial of service (secure configuration outage) via an XSS payload in the SSID name jio · 4g hotspot m2s firmware · CWE-79 | Orta6,5 | — | %5,3 | 9 Ağu 2018 |
27İzleyin | CVE-2019-7439Kavram kanıtı | cgi-bin/qcmap_web_cgi on JioFi 4G M2S 1.0.2 devices allows a DoS (Hang) via the mask POST parameter.jio · jiofi 4g m2s firmware | Orta6,5 | — | %4,8 | 21 Mar 2019 |
27İzleyin | CVE-2019-7440Kavram kanıtı | JioFi 4G M2S 1.0.2 devices have CSRF via the SSID name and Security Key field under Edit Wi-Fi Settings (aka a SetWiFi_Setting request to cgjio · jiofi 4g m2s firmware · CWE-352 | Orta6,5 | — | %2,0 | 21 Mar 2019 |
25İzleyin | CVE-2019-7438Kavram kanıtı | cgi-bin/qcmap_web_cgi on JioFi 4G M2S 1.0.2 devices has XSS and HTML injection via the mask POST parameter.jio · jiofi 4g m2s firmware · CWE-79 | Orta6,1 | — | %4,0 | 21 Mar 2019 |
24İzleyin | CVE-2019-7687İstismar yok | cgi-bin/qcmap_web_cgi on JioFi 4 jmr1140 Amtel_JMR1140_R12.07 devices has POST based reflected XSS via the Page parameter.jio · jmr1140 firmware · CWE-79 | Orta6,1 | — | %1,6 | 7 May 2019 |
- CVE-2019-774540Planlayın
JioFi 4 jmr1140 Amtel_JMR1140_R12.07 devices allow remote attackers to obtain the Wi-Fi password by making a cgi-bin/qcmap_web_cgi Page=GetW
KritikCVSS 9,8İstismar yokEPSS %4jio · jmr1140 firmware7 May 2019
- CVE-2019-774632İzleyin
JioFi 4 jmr1140 Amtel_JMR1140_R12.07 devices allow remote attackers to obtain an admin token by making a /cgi-bin/qcmap_auth type=getuser re
YüksekCVSS 8,1İstismar yokEPSS %1jio · jmr1140 firmware7 May 2019
- CVE-2018-1518128İzleyin
JioFi 4G Hotspot M2S devices allow attackers to cause a denial of service (secure configuration outage) via an XSS payload in the SSID name
OrtaCVSS 6,5Kavram kanıtıEPSS %5jio · 4g hotspot m2s firmware9 Ağu 2018
- CVE-2019-743927İzleyin
cgi-bin/qcmap_web_cgi on JioFi 4G M2S 1.0.2 devices allows a DoS (Hang) via the mask POST parameter.
OrtaCVSS 6,5Kavram kanıtıEPSS %5jio · jiofi 4g m2s firmware21 Mar 2019
- CVE-2019-744027İzleyin
JioFi 4G M2S 1.0.2 devices have CSRF via the SSID name and Security Key field under Edit Wi-Fi Settings (aka a SetWiFi_Setting request to cg
OrtaCVSS 6,5Kavram kanıtıEPSS %2jio · jiofi 4g m2s firmware21 Mar 2019
- CVE-2019-743825İzleyin
cgi-bin/qcmap_web_cgi on JioFi 4G M2S 1.0.2 devices has XSS and HTML injection via the mask POST parameter.
OrtaCVSS 6,1Kavram kanıtıEPSS %4jio · jiofi 4g m2s firmware21 Mar 2019
- CVE-2019-768724İzleyin
cgi-bin/qcmap_web_cgi on JioFi 4 jmr1140 Amtel_JMR1140_R12.07 devices has POST based reflected XSS via the Page parameter.
OrtaCVSS 6,1İstismar yokEPSS %2jio · jmr1140 firmware7 May 2019