Read the docs

Arcadyan

Records4All Threatist records
Exploited (KEV)1In CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Arcadyan records in CISA KEV
TI-2021-03393 Arcadyan Buffalo Firmware Path Traversal Vulnerability Priority CRITICAL 100KEV 2021-11-03

Components

Products in the NVD configurations · select one to filter the records
Vrv9506jac23 Firmware 2 records LOW Swisscom Internet-box Firmware 1 record LOW

Records

4 records

TI-2021-03393 CVE-2021-20090 · GHSA-6466-44wr-c6vv

Path traversal in Buffalo WSR-2533DHPL2, Buffalo WSR-2533DHP3

Priority CRITICAL 100KEV

A path traversal vulnerability in the web interfaces of Buffalo WSR-2533DHPL2 firmware version <= 1.02 and WSR-2533DHP3 firmware version <= 1.24 could allow unauthenticated remote attackers to bypass authentication.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.99982 Published 2021-04-29 No fix listed CWE-22
TI-2016-08126 CVE-2016-10042 · GHSA-hgvm-p3qr-6gxx

Authorization Bypass in the Web interface of Arcadyan SLT-00 Star* (aka Swisscom…

Priority LOW 35

Authorization Bypass in the Web interface of Arcadyan SLT-00 Star* (aka Swisscom Internet-Box) devices before R7.7 allows unauthorized reconfiguration of the static routing table via an unauthenticated HTTP request, lead…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01041 Published 2017-06-29 No fix listed CWE-284
TI-2020-07536 CVE-2020-9420 · GHSA-6f6x-3w45-x5jc

The login password of the web administrative dashboard in Arcadyan Wifi routers…

Priority LOW 29

The login password of the web administrative dashboard in Arcadyan Wifi routers VRV9506JAC23 is sent in cleartext, allowing an attacker to sniff and intercept traffic to learn the administrative credentials to the router…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00491 Published 2022-12-14 No fix listed CWE-319
TI-2020-07535 CVE-2020-9419 · GHSA-r8rh-2mfh-6v8x

Multiple stored cross-site scripting (XSS) vulnerabilities in Arcadyan Wifi routers…

Priority LOW 25

Multiple stored cross-site scripting (XSS) vulnerabilities in Arcadyan Wifi routers VRV9506JAC23 allow remote attackers to inject arbitrary web script or HTML via the hostName and domain_name parameters present in the LA…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00511 Published 2022-12-14 No fix listed CWE-79
Open these records in search →