Vendors / Fruitywifi Project Records 5 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 2
CVSS high 2
Exploited now Fruitywifi Project records in CISA KEV No Fruitywifi Project vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 51
Shell Metacharacter Injection in www/modules/save.php in FruityWifi (aka PatatasFritas/PatataWifi) through 2.4 allows remote attackers to execute arbitrary code with root privileges via a crafted mod_name parameter in a…
CVSS 3.0 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.06512 · Published 2018-11-11 · No fix listed CWE-78
Priority MEDIUM 49
FruityWifi (aka PatatasFritas/PatataWifi) 2.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the io_mode, ap_mode, io_action, io_in_iface, io_in_set, io_in_ip, io_in_mask, io_in_gw, io_…
CVSS 3.0 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.04311 · Published 2018-09-21 · No fix listed CWE-78
Priority MEDIUM 44
A remote code execution vulnerability is identified in FruityWifi through 2.4.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.03307 · Published 2020-11-05 · No fix listed CWE-78
Priority LOW 34
FruityWifi through 2.4 has an unsafe Sudo configuration [(ALL : ALL) NOPASSWD: ALL].
CVSS 3.1 HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00391 · Published 2020-10-23 · No fix listed CWE-269
Priority LOW 20
A Cross-Site Request Forgery (CSRF) vulnerability is identified in FruityWifi through 2.4.
CVSS 3.1 MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.00425 · Published 2020-10-23 · No fix listed CWE-352
Open these records in search → All records by CVSS severity
2 2 1 0 0
THREATIST.IORead the docs