Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

s. robertz vulnerabilities and exploits

(subscribe to this query)
4.6
CVSSv3
CVE-2022-20660
A vulnerability in the information storage architecture of several Cisco IP Phone models could allow an unauthenticated, physical malicious user to obtain confidential information from an affected device. This vulnerability is due to unencrypted storage of confidential informatio...
Cisco Ip Conference Phone 7832 FirmwareCisco Ip Conference Phone 8832 FirmwareCisco Ip Phone 7811 FirmwareCisco Ip Phone 7821 FirmwareCisco Ip Phone 7841 FirmwareCisco Ip Phone 7861 FirmwareCisco Ip Phone 8811 FirmwareCisco Ip Phone 8841 FirmwareCisco Ip Phone 8845 FirmwareCisco Ip Phone 8851 FirmwareCisco Ip Phone 8861 FirmwareCisco Ip Phone 8865 FirmwareCisco Unified Ip Conference Phone 8831 Firmware -Cisco Unified Ip Conference Phone 8831 For Third-party Call Control Firmware -Cisco Unified Ip Phone 7945g Firmware -Cisco Unified Ip Phone 7965g Firmware -Cisco Unified Ip Phone 7975g Firmware -Cisco Unified Sip Phone 3905 FirmwareCisco Wireless Ip Phone 8821 FirmwareCisco Wireless Ip Phone 8821-ex Firmware
6.1
CVSSv3
CVE-2021-31537
SIS SIS-REWE Go prior to 7.7 SP17 allows XSS: rewe/prod/web/index.php (affected parameters are config, version, win, db, pwd, and user) and /rewe/prod/web/rewe_go_check.php (version and all other parameters).
7.5
CVSSv3
CVE-2021-39289
Certain NetModule devices have Insecure Password Handling (cleartext or reversible encryption), These models with firmware prior to 4.3.0.113, 4.4.0.111, and 4.5.0.105 are affected: NB800, NB1600, NB1601, NB1800, NB1810, NB2700, NB2710, NB2800, NB2810, NB3700, NB3701, NB3710, NB3...
Netmodule Netmodule Router Software
9.8
CVSSv3
CVE-2021-39290
Certain NetModule devices allow Limited Session Fixation via PHPSESSID. These models with firmware prior to 4.3.0.113, 4.4.0.111, and 4.5.0.105 are affected: NB800, NB1600, NB1601, NB1800, NB1810, NB2700, NB2710, NB2800, NB2810, NB3700, NB3701, NB3710, NB3711, NB3720, and NB3800.
Netmodule Netmodule Router Software
9.8
CVSSv3
CVE-2022-31211
An issue exists in Infiray IRAY-A8Z3 1.0.957. There is a blank root password for TELNET by default.
Infiray Iray-a8z3 Firmware 1.0.957
9.8
CVSSv3
CVE-2022-31209
An issue exists in Infiray IRAY-A8Z3 1.0.957. The firmware contains a potential buffer overflow by calling strcpy() without checking the string length beforehand.
Infiray Iray-a8z3 Firmware 1.0.957
8.8
CVSSv3
CVE-2021-39291
Certain NetModule devices allow credentials via GET parameters to CLI-PHP. These models with firmware prior to 4.3.0.113, 4.4.0.111, and 4.5.0.105 are affected: NB800, NB1600, NB1601, NB1800, NB1810, NB2700, NB2710, NB2800, NB2810, NB3700, NB3701, NB3710, NB3711, NB3720, and NB38...
Netmodule Netmodule Router Software
9.8
CVSSv3
CVE-2022-31210
An issue exists in Infiray IRAY-A8Z3 1.0.957. The binary file /usr/local/sbin/webproject/set_param.cgi contains hardcoded credentials to the web application. Because these accounts cannot be deactivated or have their passwords changed, they are considered to be backdoor accounts.
Infiray Iray-a8z3 Firmware 1.0.957
8.8
CVSSv3
CVE-2022-31208
An issue exists in Infiray IRAY-A8Z3 1.0.957. The webserver contains an endpoint that can execute arbitrary commands by manipulating the cmd_string URL parameter.
Infiray Iray-a8z3 Firmware 1.0.957
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionSSRFbuffer overflowCVE-2023-28952CVE-2023-41822CVE-2024-27956CVE-2023-7028CVE-2024-34447CVE-2024-34460
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook