Ee

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

Ee records in CISA KEV

No Ee vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

4gee Wifi Mbb Firmware 3 records MEDIUM 4gee Firmware 1 record MEDIUM Ee40vb Firmware 1 record MEDIUM

Records

3 records in 4gee Wifi Mbb Firmware · all components

TI-2017-10389 CVE-2017-14269 · GHSA-3m46-mqf2-cgqp

EE 4GEE WiFi MBB (before EE60_00_05.00_31) devices allow remote attackers to obtain…

MEDIUM 45

EE 4GEE WiFi MBB (before EE60_00_05.00_31) devices allow remote attackers to obtain sensitive information via a JSONP endpoint, as demonstrated by passwords and SMS content.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01626 Published 2017-09-11 No fix listed CWE-200

TI-2017-10387 CVE-2017-14267 · GHSA-rv3h-hx86-96vc

EE 4GEE WiFi MBB (before EE60_00_05.00_31) devices have CSRF, related to…

LOW 39

EE 4GEE WiFi MBB (before EE60_00_05.00_31) devices have CSRF, related to goform/AddNewProfile, goform/setWanDisconnect, goform/setSMSAutoRedirectSetting, goform/setReset, and goform/uploadBackupSettings.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00743 Published 2017-09-11 No fix listed CWE-352

TI-2017-10388 CVE-2017-14268 · GHSA-fqc4-vrq2-9gcp

EE 4GEE WiFi MBB (before EE60_00_05.00_31) devices have XSS in the sms_content parameter in a getSMSlist request.

LOW 28

EE 4GEE WiFi MBB (before EE60_00_05.00_31) devices have XSS in the sms_content parameter in a getSMSlist request.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00724 Published 2017-09-11 No fix listed CWE-79

Open these records in search →

Critical	1
High	3
Medium	1
Low	0
No CVSS	0