Fon

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Fon records in CISA KEV

No Fon vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Fon2601e-fsw-b Firmware 1 record LOW Fon2601e-fsw-s Firmware 1 record LOW Fon2601e-re Firmware 1 record LOW Fon2601e-se Firmware 1 record LOW La Fonera 1 record LOW La Fonera+ 1 record LOW La Fonera+ Firmware 1 record LOW

Records

3 records

TI-2019-04304 CVE-2019-6015 · GHSA-88x6-gq74-9xxv

Uncontrolled resource consumption in FON2601E-SE, FON2601E-RE, FON2601E-FSW-S, and…

LOW 36

FON2601E-SE, FON2601E-RE, FON2601E-FSW-S, and FON2601E-FSW-B with firmware versions 1.1.7 and earlier contain an issue where they may behave as open resolvers.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01608 Published 2019-10-04 No fix listed CWE-400

TI-2007-00188 CVE-2007-0193 · GHSA-672j-xwv9-5wq3

FON La Fonera routers do not properly limit DNS service access by unauthenticated…

LOW 36

FON La Fonera routers do not properly limit DNS service access by unauthenticated clients, which allows remote attackers to tunnel traffic via DNS requests for hosts that should not be accessible before authentication.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01555 Published 2007-01-11 No fix listed

TI-2011-01166 CVE-2011-1326 · GHSA-37j2-4mf7-p7r4

Unspecified vulnerability on the La Fonera+ router with firmware before 1.7.0.1 allows…

LOW 29

Unspecified vulnerability on the La Fonera+ router with firmware before 1.7.0.1 allows remote attackers to cause a denial of service via unknown vectors.

CVSS 2.0MEDIUM 6.1 Adjacent network No auth Interaction — EPSS 0.00795 Published 2011-05-13 No fix listed

Open these records in search →

Critical	0
High	2
Medium	1
Low	0
No CVSS	0