Read the docs

ETIC Telecom

Records9All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

ETIC Telecom records in CISA KEV

No ETIC Telecom vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Remote Access Server Firmware 9 records MEDIUM

Records

9 records

TI-2022-03404 CVE-2022-3703 · GHSA-5g4j-78x8-fff7

ETIC Telecom Remote Access Server Insufficient Verification of Data Authenticity

Priority MEDIUM 43

All versions of ETIC Telecom Remote Access Server (RAS) 4.5.0 and prior’s web portal is vulnerable to accepting malicious firmware packages that could provide a backdoor to an attacker and provide privilege escalation to…

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00358 Published 2022-11-10 No fix listed CWE-345
TI-2023-03225 CVE-2023-3453 · GHSA-w3f5-3hvg-x2vg

ETIC Telecom Insecure Default Initialization of Resource

Priority LOW 35

ETIC Telecom RAS versions 4.7.0 and prior the web management portal authentication disabled by default.

CVSS 3.1HIGH 8.1 Adjacent network No auth No interaction EPSS 0.00339 Published 2023-08-23 No fix listed CWE-1188
TI-2022-20010 CVE-2022-41607 · GHSA-9xjj-cx8r-x5m9

ETIC Telecom Remote Access Server Path Traversal

Priority LOW 35

All versions of ETIC Telecom Remote Access Server (RAS) 4.5.0 and prior’s application programmable interface (API) is vulnerable to directory traversal through several different methods.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01106 Published 2022-11-10 No fix listed CWE-22
TI-2024-17247 CVE-2024-26157 · GHSA-6m77-33f8-v28x

ETIC Telecom Remote Access Server (RAS) Cross-site Scripting

Priority LOW 24

All versions of ETIC Telecom Remote Access Server (RAS) prior to 4.5.0 are vulnerable to reflected cross site scripting (XSS) attacks in get view method under view parameter.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00239 Published 2025-01-17 Fixed in 4.5.0 CWE-79
TI-2024-17246 CVE-2024-26156 · GHSA-gvf6-6v9q-fc35

ETIC Telecom Remote Access Server (RAS) Cross-site Scripting

Priority LOW 22

All versions of ETIC Telecom Remote Access Server (RAS) prior to 4.5.0 are vulnerable to reflected cross site scripting (XSS) attacks in the method parameter.

CVSS 4.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.00231 Published 2025-01-17 Fixed in 4.5.0 CWE-79
TI-2024-17244 CVE-2024-26154 · GHSA-q4j6-2ccx-7qvg

ETIC Telecom Remote Access Server (RAS) Cross-site Scripting

Priority LOW 22

All versions of ETIC Telecom Remote Access Server (RAS) prior to 4.5.0 are vulnerable to reflected cross site scripting in the appliance site name.

CVSS 4.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.00231 Published 2025-01-17 Fixed in 4.5.0 CWE-79
Open these records in search →