Jio

Records7All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Jio records in CISA KEV

No Jio vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Jiofi 4g M2s Firmware 3 records LOW Jmr1140 Firmware 3 records MEDIUM 4g Hotspot M2s Firmware 1 record LOW

Records

7 records

TI-2019-05458 CVE-2019-7745 · GHSA-75v7-h9gp-f766

JioFi 4 jmr1140 Amtel_JMR1140_R12.07 devices allow remote attackers to obtain the Wi-Fi…

MEDIUM 49

JioFi 4 jmr1140 Amtel_JMR1140_R12.07 devices allow remote attackers to obtain the Wi-Fi password by making a cgi-bin/qcmap_web_cgi Page=GetWiFi_Setting request and then reading the wpa_security_key field.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03807 Published 2019-05-07 No fix listed

TI-2019-05459 CVE-2019-7746 · GHSA-wwj4-pqg8-68wr

JioFi 4 jmr1140 Amtel_JMR1140_R12.07 devices allow remote attackers to obtain an admin…

LOW 37

JioFi 4 jmr1140 Amtel_JMR1140_R12.07 devices allow remote attackers to obtain an admin token by making a /cgi-bin/qcmap_auth type=getuser request and then reading the token field.

CVSS 3.0HIGH 8.1 Network No auth User interaction EPSS 0.01058 Published 2019-05-07 No fix listed CWE-352

TI-2018-10864 CVE-2018-15181 · GHSA-86p3-4785-rm9c

JioFi 4G Hotspot M2S devices allow attackers to cause a denial of service (secure…

LOW 37

JioFi 4G Hotspot M2S devices allow attackers to cause a denial of service (secure configuration outage) via an XSS payload in the SSID name and Security Key fields.

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.05216 Published 2018-08-09 No fix listed CWE-79

TI-2019-05299 CVE-2019-7439 · GHSA-w622-2pcj-f3x2

cgi-bin/qcmap_web_cgi on JioFi 4G M2S 1.0.2 devices allows a DoS (Hang) via the mask POST parameter.

LOW 36

cgi-bin/qcmap_web_cgi on JioFi 4G M2S 1.0.2 devices allows a DoS (Hang) via the mask POST parameter.

CVSS 3.0MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.04766 Published 2019-03-20 No fix listed

TI-2019-05298 CVE-2019-7438 · GHSA-9j75-r65g-wv9g

cgi-bin/qcmap_web_cgi on JioFi 4G M2S 1.0.2 devices has XSS and HTML injection via the mask POST parameter.

LOW 34

cgi-bin/qcmap_web_cgi on JioFi 4G M2S 1.0.2 devices has XSS and HTML injection via the mask POST parameter.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.03991 Published 2019-03-20 No fix listed CWE-79

TI-2019-05300 CVE-2019-7440 · GHSA-8qmx-q6vc-f5mv

JioFi 4G M2S 1.0.2 devices have CSRF via the SSID name and Security Key field under Edit…

LOW 33

JioFi 4G M2S 1.0.2 devices have CSRF via the SSID name and Security Key field under Edit Wi-Fi Settings (aka a SetWiFi_Setting request to cgi-bin/qcmap_web_cgi).

CVSS 3.0MEDIUM 6.5 Network No auth User interaction EPSS 0.0196 Published 2019-03-20 No fix listed CWE-352

TI-2019-05418 CVE-2019-7687 · GHSA-2cxx-gfmw-p9v8

cgi-bin/qcmap_web_cgi on JioFi 4 jmr1140 Amtel_JMR1140_R12.07 devices has POST based…

LOW 30

cgi-bin/qcmap_web_cgi on JioFi 4 jmr1140 Amtel_JMR1140_R12.07 devices has POST based reflected XSS via the Page parameter.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.0155 Published 2019-05-07 No fix listed CWE-79

Open these records in search →

Critical	1
High	1
Medium	5
Low	0
No CVSS	0