MitraStar

Records6All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high4CVSS 7.0–8.9

Exploited now

MitraStar records in CISA KEV

No MitraStar vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Dsl-100hn-t1 Firmware 2 records MEDIUM Gpt-2541gnac Firmware 2 records MEDIUM Gpt-2541gnac-n1 Firmware 1 record MEDIUM Gpt-2741gnac-n2 Firmware 1 record MEDIUM Gpt-2741gnac Firmware 1 record HIGH

Records

6 records

TI-2023-16518 CVE-2023-33381 · GHSA-cx2x-582w-9g9w

A command injection vulnerability was found in the ping functionality of the MitraStar…

HIGH 67

A command injection vulnerability was found in the ping functionality of the MitraStar GPT-2741GNAC router (firmware version AR_g5.8_110WVN0b7_2).

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.22185 Published 2023-06-06 No fix listed CWE-78

TI-2024-09260 CVE-2024-9977 · GHSA-pggm-8jq8-xmxw

MitraStar GPT-2541GNAC Firewall Settings Page settings-firewall.cgi os command injection

MEDIUM 56

A vulnerability, which was classified as critical, was found in MitraStar GPT-2541GNAC BR_g5.6_1.11(WVK.0)b26.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.22942 Published 2024-10-15 No fix listed CWE-78

TI-2021-18655 CVE-2021-42165 · GHSA-28rf-jqpf-2x8g

MitraStar GPT-2541GNAC-N1 (HGU) 100VNZ0b33 devices allow remote authenticated users to…

MEDIUM 53

MitraStar GPT-2541GNAC-N1 (HGU) 100VNZ0b33 devices allow remote authenticated users to obtain root access by executing command "deviceinfo show file &&/bin/bash" because of incorrect sanitization of parameter "path".

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.14104 Published 2022-05-03 No fix listed CWE-78

TI-2017-12135 CVE-2017-16523 · GHSA-mp3c-h87m-phrj

MitraStar GPT-2541GNAC (HGU) 1.00(VNJ0)b1 and DSL-100HN-T1 ES_113WJY0b16 devices have a…

MEDIUM 49

MitraStar GPT-2541GNAC (HGU) 1.00(VNJ0)b1 and DSL-100HN-T1 ES_113WJY0b16 devices have a zyad1234 password for the zyad1234 account, which is equivalent to root and undocumented.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03825 Published 2017-11-03 No fix listed

TI-2023-14120 CVE-2023-30065 · GHSA-5rv6-mg5f-h55g

MitraStar GPT-2741GNAC-N2 with firmware BR_g5.9_1.11(WVK.0)b32 was discovered to contain…

MEDIUM 43

MitraStar GPT-2741GNAC-N2 with firmware BR_g5.9_1.11(WVK.0)b32 was discovered to contain a remote code execution (RCE) vulnerability in the ping function.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01328 Published 2023-05-05 No fix listed

TI-2017-12134 CVE-2017-16522 · GHSA-jmvg-77xw-264g

MitraStar GPT-2541GNAC (HGU) 1.00(VNJ0)b1 and DSL-100HN-T1 ES_113WJY0b16 devices allow…

MEDIUM 43

MitraStar GPT-2541GNAC (HGU) 1.00(VNJ0)b1 and DSL-100HN-T1 ES_113WJY0b16 devices allow remote authenticated users to obtain root access by specifying /bin/sh as the command to execute.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.02571 Published 2017-11-03 No fix listed CWE-276

Open these records in search →

Critical	1
High	4
Medium	1
Low	0
No CVSS	0