İçeriğe atla
Noroxi

orange kayıtları

orange üreticisine ait 8 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
0
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 17
  2. 18

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

8 kayıt
  • CVE-2018-20377
    41Planlayın

    Orange Livebox 00.96.320S devices allow remote attackers to discover Wi-Fi credentials via /get_getnetworkconf.cgi on port 8080, leading to

    KritikCVSS 9,8Kavram kanıtıEPSS %8

    orange · arv7519rw22 livebox 2.1 firmware23 Ara 2018

  • CVE-2018-18375
    39İzleyin

    goform/getProfileList in Orange AirBox Y858_FL_01.16_04 allows attackers to extract APN data (name, number, username, and password) via the

    KritikCVSS 9,8İstismar yokEPSS %1

    orange · airbox firmware15 Eki 2018

  • CVE-2014-3150
    36İzleyin

    Livebox 1.1 allows remote authenticated users to upload arbitrary configuration files, download the configuration file, or obtain sensitive

    YüksekCVSS 8,8İstismar yokEPSS %2

    orange · livebox 1.1 firmware15 Kas 2017

  • CVE-2018-20577
    36İzleyin

    Orange Livebox 00.96.320S devices allow cgi-bin/restore.exe, cgi-bin/firewall_SPI.exe, cgi-bin/setup_remote_mgmt.exe, cgi-bin/setup_pass.exe

    KritikCVSS 9,1İstismar yokEPSS %1

    orange · arv7519rw22 livebox 2.1 firmware28 Ara 2018

  • CVE-2018-18376
    30İzleyin

    goform/getWlanClientInfo in Orange AirBox Y858_FL_01.16_04 allows remote attackers to discover information about currently connected devices

    YüksekCVSS 7,5İstismar yokEPSS %2

    orange · airbox firmware15 Eki 2018

  • CVE-2018-20575
    30İzleyin

    Orange Livebox 00.96.320S devices have an undocumented /system_firmwarel.stm URI for manual firmware update.

    YüksekCVSS 7,5İstismar yokEPSS %1

    orange · arv7519rw22 livebox 2.1 firmware28 Ara 2018

  • CVE-2018-18377
    30İzleyin

    goform/setReset on Orange AirBox Y858_FL_01.16_04 devices allows attackers to reset a router to factory settings, which can be used to login

    YüksekCVSS 7,5İstismar yokEPSS %1

    orange · airbox firmware15 Eki 2018

  • CVE-2018-20576
    21İzleyin

    Orange Livebox 00.96.320S devices allow cgi-bin/autodialing.exe and cgi-bin/phone_test.exe CSRF, leading to arbitrary outbound telephone cal

    OrtaCVSS 5,4İstismar yokEPSS %0

    orange · arv7519rw22 livebox 2.1 firmware28 Ara 2018