Vendors / Fastweb Records 6 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 2
CVSS high 4
Exploited now Fastweb records in CISA KEV No Fastweb vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 50
The web interface on FASTGate Fastweb devices with firmware through 0.00.47_FW_200_Askey 2017-05-17 (software through 1.0.1b) exposed a CGI binary that is vulnerable to a command injection vulnerability that can be explo…
CVSS 3.0 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.04821 · Published 2019-02-21 · No fix listed CWE-78
Priority MEDIUM 42
Fastweb FASTgate 0.00.47 devices are vulnerable to CSRF, with impacts including Wi-Fi password changing, Guest Wi-Fi activating, etc.
CVSS 3.0 HIGH 8.8· Network · No auth · User interaction · EPSS 0.02264 · Published 2018-05-11 · No fix listed CWE-352
Priority LOW 36
Fastweb FASTGate 1.0.1b devices allow partial authentication bypass by changing a certain check_pwd return value from 0 to 1.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.01505 · Published 2019-11-02 · No fix listed CWE-287
Open these records in search → All records by CVSS severity
2 4 0 0 0
