Read the docs

Hot

Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Hot records in CISA KEV

No Hot vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Hotbox Router 6 records LOW Hotbox Router Firmware 6 records LOW

Records

6 records in Hotbox Router · all components

TI-2013-04407 CVE-2013-5038 · GHSA-vhvm-cphw-82hj

The HOT HOTBOX router with software 2.1.11 allows remote attackers to bypass…

Priority LOW 32

The HOT HOTBOX router with software 2.1.11 allows remote attackers to bypass authentication by configuring a source IP address that had previously been used for an authenticated session.

CVSS 2.0MEDIUM 5.8 Adjacent network No auth Interaction — EPSS 0.03279 Published 2013-12-30 No fix listed CWE-287
TI-2013-04408 CVE-2013-5039 · GHSA-wmgq-vxwf-mfpv

Cross-site request forgery (CSRF) vulnerability in goform/wlanBasicSecurity on the HOT…

Priority LOW 29

Cross-site request forgery (CSRF) vulnerability in goform/wlanBasicSecurity on the HOT HOTBOX router with software 2.1.11 allows remote attackers to hijack the authentication of administrators for requests that change th…

CVSS 2.0MEDIUM 5.4 Adjacent network No auth Interaction — EPSS 0.02131 Published 2013-12-30 No fix listed CWE-352
TI-2013-04528 CVE-2013-5218 · GHSA-xvw8-w3w2-qpgq

Cross-site scripting (XSS) vulnerability on the HOT HOTBOX router with software 2.1.11…

Priority LOW 21

Cross-site scripting (XSS) vulnerability on the HOT HOTBOX router with software 2.1.11 allows remote attackers to inject arbitrary web script or HTML via a crafted DHCP Host Name option, which is not properly handled dur…

CVSS 2.0LOW 2.9 Adjacent network No auth Interaction — EPSS 0.03758 Published 2013-12-30 No fix listed CWE-79
Open these records in search →