Ctekproducts

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Ctekproducts records in CISA KEV

No Ctekproducts vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Skyrouter 1 record HIGH Skyrouter Z4200 Firmware 1 record MEDIUM Skyrouter Z4400 Firmware 1 record MEDIUM

Records

2 records

TI-2011-04292 CVE-2011-5010 · GHSA-c8pc-9wvq-8c7r

apps/a3/cfg_ethping.cgi in the Ctek SkyRouter 4200 and 4300 allows remote attackers to…

HIGH 79

apps/a3/cfg_ethping.cgi in the Ctek SkyRouter 4200 and 4300 allows remote attackers to execute arbitrary commands via shell metacharacters in the PINGADDRESS parameter for a "u" action.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.65718 Published 2011-12-25 No fix listed CWE-264

TI-2017-10183 CVE-2017-14000 · GHSA-rjqm-qfjg-658j

Improper authentication in Ctek, Inc. SkyRouter

MEDIUM 45

An Improper Authentication issue was discovered in Ctek SkyRouter Series 4200 and 4400, all versions prior to V6.00.11.

CVSS 3.0CRITICAL 9.4 Network No auth No interaction EPSS 0.02269 Published 2017-10-04 No fix listed CWE-287

Open these records in search →

Critical	2
High	0
Medium	0
Low	0
No CVSS	0