Read the docs

Billion Electric

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9

Exploited now

Billion Electric records in CISA KEV

No Billion Electric vulnerabilities are listed in CISA KEV.

Records

5 records

Priority MEDIUM 44

Certain modes of routers from Billion Electric have a Missing Authentication vulnerability, allowing unauthenticated remote attackers to directly access the specific functionality to obtain partial device information, mo…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.0046 Published 2024-11-29 Fixed in 1.04.1.592.8, 1.04.613.13 +1 CWE-306
Priority MEDIUM 40

Certain models of routers from Billion Electric has an Authentication Bypass vulnerability, allowing unautheticated attackers to retrive contents of arbitrary web pages.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00541 Published 2024-11-29 Fixed in 1.04.1.592.8, 1.04.1.613.13 +1 CWE-288
Priority LOW 38

Certain models of routers from Billion Electric has hard-coded embedded linux credentials, allowing attackers to log in through the SSH service using these credentials and obtain root privilege of the system.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00189 Published 2025-02-11 Fixed in 1.04.1.592.10, 1.04.1.613.14 +1 CWE-798
Priority LOW 36

Certain models of routers from Billion Electric has an OS Command Injection vulnerability, allowing remote attackers with administrator privileges to inject arbitrary system commands into a specific SSH function and exec…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01125 Published 2024-11-29 Fixed in 1.04.1.592.8, 1.04.1.613.13 +1 CWE-78
Priority LOW 35

Certain models of routers from Billion Electric has a Plaintext Storage of a Password vulnerability.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00625 Published 2024-11-29 Fixed in 1.04.1.592.8, 1.04.1.613.13 +1 CWE-256
Open these records in search →