Vendors / Beeline Records 4 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 3
Exploited now Beeline records in CISA KEV No Beeline vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 46
Beeline Smart Box 2.0.38 routers allow "Advanced settings > Other > Diagnostics" OS command injection via the Ping ping_ipaddr parameter, the Nslookup nslookup_ipaddr parameter, or the Traceroute traceroute_ipaddr parame…
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.04899 · Published 2020-04-29 · No fix listed CWE-78
Priority MEDIUM 40
Android devices with code from Ragentek contain a privileged binary that performs over-the-air (OTA) update checks.
CVSS 3.0 HIGH 8.1· Network · No auth · No interaction · EPSS 0.02625 · Published 2018-07-13 · No fix listed CWE-494
Priority LOW 39
Beeline Smart box 2.0.38 is vulnerable to Cross Site Request Forgery (CSRF) via mgt_end_user.htm.
CVSS 3.1 HIGH 8.8· Network · No auth · User interaction · EPSS 0.0071 · Published 2021-11-10 · No fix listed CWE-352
Priority LOW 29
Beeline Smart Box 2.0.38 is vulnerable to Cross Site Scripting (XSS) via the choose_mac parameter to setup.cgi.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.01079 · Published 2021-11-10 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
0 3 1 0 0
