Vendors / Four-Faith Records 11 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 3 CVSS 9.0–10.0
CVSS high 3 CVSS 7.0–8.9
Exploited now Four-Faith records in CISA KEV No Four-Faith vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 82
The Four-Faith F3x36 router using firmware v2.0.0 is vulnerable to authentication bypass due to hard-coded credentials in the administrative web server.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.03014 · Published 2025-02-04 · No fix listed CWE-489
Priority HIGH 75
The Four-Faith router models F3x24 and F3x36 are affected by an operating system (OS) command injection vulnerability.
CVSS 3.1 HIGH 7.2· Network · High privileges · No interaction · EPSS 0.84124 · Published 2024-12-27 · No fix listed CWE-1392
Priority MEDIUM 50
The Four-Faith F3x36 router using firmware v2.0.0 is vulnerable to an authentication bypass vulnerability in the administrative web server.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00668 · Published 2025-02-04 · No fix listed CWE-306
Open these records in search → All records by CVSS severity
Critical3 High3 Medium5 Low0 No CVSS0