Vendors / Four-Faith Records 11 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 3 CVSS 9.0–10.0
CVSS high 3 CVSS 7.0–8.9
Exploited now Four-Faith records in CISA KEV No Four-Faith vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 82
The Four-Faith F3x36 router using firmware v2.0.0 is vulnerable to authentication bypass due to hard-coded credentials in the administrative web server.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.03014 · Published 2025-02-04 · No fix listed CWE-489
Priority HIGH 75
The Four-Faith router models F3x24 and F3x36 are affected by an operating system (OS) command injection vulnerability.
CVSS 3.1 HIGH 7.2· Network · High privileges · No interaction · EPSS 0.84124 · Published 2024-12-27 · No fix listed CWE-1392
Priority HIGH 70
A vulnerability was detected in Four-Faith Water Conservancy Informatization Platform up to 2.2.
CVSS 4.0 MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00695 · Published 2025-10-06 · No fix listed CWE-22
Priority HIGH 70
A security vulnerability has been detected in Four-Faith Water Conservancy Informatization Platform up to 2.2.
CVSS 4.0 MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00695 · Published 2025-10-06 · No fix listed CWE-22
Priority HIGH 70
A flaw has been found in Four-Faith Water Conservancy Informatization Platform 1.0.
CVSS 4.0 MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00971 · Published 2025-09-26 · No fix listed CWE-22
Priority HIGH 70
A vulnerability was detected in Four-Faith Water Conservancy Informatization Platform 1.0.
CVSS 4.0 MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00971 · Published 2025-09-19 · No fix listed CWE-22
Priority HIGH 70
A security vulnerability has been detected in Four-Faith Water Conservancy Informatization Platform 1.0.
CVSS 4.0 MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00971 · Published 2025-09-19 · No fix listed CWE-22
Priority MEDIUM 50
The Four-Faith F3x36 router using firmware v2.0.0 is vulnerable to an authentication bypass vulnerability in the administrative web server.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00668 · Published 2025-02-04 · No fix listed CWE-306
Priority MEDIUM 44
A vulnerability, which was classified as critical, has been found in Xiamen Four Letter Video Surveillance Management System up to 20230712.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00948 · Published 2023-07-21 · No fix listed CWE-285
Priority MEDIUM 40
A vulnerability, which was classified as critical, has been found in Xiamen Four-Faith Video Surveillance Management System 2016/2017.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00967 · Published 2023-11-27 · No fix listed CWE-434
Priority LOW 39
Four-Faith Wireless Mobile Router F3x24 v1.0 devices allow remote code execution via the Command Shell (aka Administration > Commands) screen.
CVSS 3.0 HIGH 7.2· Network · High privileges · No interaction · EPSS 0.04911 · Published 2019-05-17 · No fix listed CWE-862
Open these records in search → All records by CVSS severity
Critical3 High3 Medium5 Low0 No CVSS0