Axesstel

Records11All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high4CVSS 7.0–8.9

Exploited now

Axesstel records in CISA KEV

No Axesstel vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

3 records in Mu553s Firmware · all components

TI-2017-08389 CVE-2017-11351 · GHSA-w498-rr25-2crx

MEDIUM 45

Axesstel MU553S MU55XS-V1.14 devices have a default password of admin for the admin account.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01405 Published 2017-09-13 No fix listed CWE-798

TI-2017-08388 CVE-2017-11350 · GHSA-5hf3-hxrg-36rp

LOW 38

Cross-Site Request Forgery (CSRF) exists in cgi-bin/ConfigSet on Axesstel MU553S MU55XS-V1.14 devices.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00449 Published 2017-09-13 No fix listed CWE-352

TI-2017-09999 CVE-2017-13724 · GHSA-7575-9jw8-fp9m

LOW 25

On the Axesstel MU553S MU55XS-V1.14, there is a Stored Cross Site Scripting vulnerability in the APN parameter under the "Basic Settings" page.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00513 Published 2017-09-13 No fix listed CWE-79