Cudy

Records7All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Cudy records in CISA KEV

No Cudy vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

3 records in Lt400 Firmware · all components

TI-2023-15241 CVE-2023-31853 · GHSA-xh64-ffcx-p82v

MEDIUM 60

Cudy LT400 1.13.4 is vulnerable Cross Site Scripting (XSS) in /cgi-bin/luci/admin/network/bandwidth via the icon parameter.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00499 Published 2023-07-17 No fix listed CWE-79

TI-2023-15240 CVE-2023-31852 · GHSA-8gj8-6pr8-hxpm

MEDIUM 60

Cudy LT400 1.13.4 is vulnerable to Cross Site Scripting (XSS) in cgi-bin/luci/admin/network/wireless/config via the iface parameter.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00672 Published 2023-07-17 No fix listed CWE-79

TI-2023-15239 CVE-2023-31851 · GHSA-x5hv-w3m8-3mj8

MEDIUM 60

Cudy LT400 1.13.4 is has a cross-site scripting (XSS) vulnerability in /cgi-bin/luci/admin/network/wireless/status via the iface parameter.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00499 Published 2023-07-17 No fix listed CWE-79