Ave

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Ave records in CISA KEV

No Ave vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

53ab-wbs Firmware 3 records MEDIUM Dominaplus 3 records MEDIUM Ts01 Firmware 3 records MEDIUM Ts03x-v Firmware 3 records MEDIUM Ts04x-v Firmware 3 records MEDIUM Ts05 Firmware 3 records MEDIUM Ts05n-v Firmware 3 records MEDIUM

Records

3 records in Ts01 Firmware · all components

TI-2020-14219 CVE-2020-21994 · GHSA-j6wp-x7wc-m898

AVE DOMINAplus <=1.10.x suffers from clear-text credentials disclosure vulnerability that…

MEDIUM 48

AVE DOMINAplus <=1.10.x suffers from clear-text credentials disclosure vulnerability that allows an unauthenticated attacker to issue a request to an unprotected directory that hosts an XML file '/xml/authClients.xml' an…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0366 Published 2021-04-28 No fix listed CWE-522

TI-2020-14216 CVE-2020-21991 · GHSA-9c5r-2fv8-6qm7

AVE DOMINAplus <=1.10.x suffers from an authentication bypass vulnerability due to…

MEDIUM 47

AVE DOMINAplus <=1.10.x suffers from an authentication bypass vulnerability due to missing control check when directly calling the autologin GET parameter in changeparams.php script.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02914 Published 2021-04-28 No fix listed CWE-287

TI-2020-14221 CVE-2020-21996 · GHSA-pj8c-6w77-4wph

AVE DOMINAplus <=1.10.x suffers from an unauthenticated reboot command execution.

LOW 39

AVE DOMINAplus <=1.10.x suffers from an unauthenticated reboot command execution.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03563 Published 2021-04-28 No fix listed CWE-306

Open these records in search →

Critical	2
High	1
Medium	0
Low	0
No CVSS	0