EXFO

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

EXFO records in CISA KEV

No EXFO vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

3 records in Bv-10 Firmware · all components

TI-2022-18567 CVE-2022-39185 · GHSA-qhfg-3j7q-77q7

MEDIUM 50

EXFO - BV-10 Performance Endpoint Unit Undocumented privileged user.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00638 Published 2023-01-12 No fix listed CWE-798

TI-2022-18566 CVE-2022-39184 · GHSA-5x28-qq48-wpwq

MEDIUM 50

EXFO - BV-10 Performance Endpoint Unit authentication bypass User can manually manipulate access enabling authentication bypass.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00784 Published 2023-01-12 No fix listed CWE-287

TI-2022-18568 CVE-2022-39186 · GHSA-rvf2-5462-xv53

LOW 27

EXFO - BV-10 Performance Endpoint Unit misconfiguration.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00168 Published 2023-01-12 No fix listed CWE-732