Vendors / Furuno Records 3 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 3
CVSS high 0
Exploited now Furuno records in CISA KEV No Furuno vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 47
FURUNO FELCOM 250 and 500 devices use only client-side JavaScript in login.js for authentication.
CVSS 3.0 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02359 · Published 2018-09-06 · No fix listed CWE-287
Priority MEDIUM 46
FURUNO FELCOM 250 and 500 devices allow unauthenticated users to change the password for the Admin, Log and Service accounts, as well as the password for the protected "SMS" panel via /cgi-bin/sm_changepassword.cgi and /…
CVSS 3.0 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02162 · Published 2018-09-10 · No fix listed CWE-862
Priority MEDIUM 45
FURUNO FELCOM 250 and 500 devices allow unauthenticated access to the xml/permission.xml file containing all of the system's usernames and passwords.
CVSS 3.0 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01573 · Published 2018-09-10 · No fix listed CWE-200
Open these records in search → All records by CVSS severity
3 0 0 0 0
THREATIST.IORead the docs