Vendors / openwrt Records 169 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 17 CVSS 9.0–10.0
CVSS high 50 CVSS 7.0–8.9
Exploited now openwrt records in CISA KEV No openwrt vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority LOW 38
An issue was discovered in OpenWrt 18.06.0 to 18.06.6 and 19.07.0, and LEDE 17.01.0 to 17.01.7.
CVSS 3.1 HIGH 8.1· Network · No auth · No interaction · EPSS 0.01596 · Published 2020-03-16 · No fix listed CWE-345
Priority LOW 28
cgi_handle_request in uhttpd in OpenWrt through 18.06.1 and LEDE through 17.01 has unauthenticated reflected XSS via the URI, as demonstrated by a cgi-bin/?[XSS] URI.
CVSS 3.0 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00663 · Published 2018-11-28 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
Critical17 High50 Medium97 Low5 No CVSS0