FreshTomato

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical4CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

FreshTomato records in CISA KEV

No FreshTomato vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

5 records

TI-2022-11309 CVE-2022-28665 · GHSA-mxph-pm8g-2q9m

HIGH 81

A memory corruption vulnerability exists in the httpd unescape functionality of FreshTomato 2022.1.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01343 Published 2022-08-05 No fix listed CWE-787

TI-2022-11308 CVE-2022-28664 · GHSA-whjh-pf6x-5rxq

HIGH 81

A memory corruption vulnerability exists in the httpd unescape functionality of FreshTomato 2022.1.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01528 Published 2022-08-05 No fix listed CWE-787

TI-2022-20679 CVE-2022-42484 · GHSA-xpf6-m5rc-7966

HIGH 76

An OS command injection vulnerability exists in the httpd logs/view.cgi functionality of FreshTomato 2022.5.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.06013 Published 2023-01-30 No fix listed CWE-78

TI-2023-03706 CVE-2023-3991 · GHSA-g95v-666p-2m3x

MEDIUM 47

An OS command injection vulnerability exists in the httpd iperfrun.cgi functionality of FreshTomato 2023.3.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.02129 Published 2023-10-16 No fix listed CWE-78

TI-2022-18076 CVE-2022-38451 · GHSA-fx25-235q-5cgx

LOW 37

A directory traversal vulnerability exists in the httpd update.cgi functionality of FreshTomato 2022.5.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02124 Published 2023-01-30 No fix listed CWE-22