Read the docs

Optilinknetwork

Records12All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Optilinknetwork records in CISA KEV

No Optilinknetwork vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

12 records

Priority HIGH 77

Unauthenticated remote code execution in OPTILINK OP-XT71000N, Hardware Version: V2.2 occurs when the attacker passes arbitrary commands with IP-ADDRESS using " | " to execute commands on " /diag_tracert_admin.asp " in t…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.41443 Published 2022-11-23 No fix listed CWE-77
Priority MEDIUM 44

A vulnerability in OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OP_V3.3.1-191028 allows an attacker to upload arbitrary files through " /mgm_dev_upgrade.asp " which can "delete every file for Denial of…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01184 Published 2022-11-23 No fix listed CWE-434
Priority LOW 39

A vulnerability in OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OP_V3.3.1-191028 allows an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack to Reset ONU to Factory…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0058 Published 2022-11-23 No fix listed CWE-352
Priority LOW 29

A vulnerability in OPTILINK OP-XT71000N Hardware Version: V2.2, Firmware Version: OP_V3.3.1-191028 allows an unauthenticated, remote attacker to conduct a cross site request forgery (CSRF) attack to enable syslog mode th…

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00473 Published 2022-11-23 No fix listed CWE-352
Priority LOW 29

A vulnerability in Optilink OP-XT71000N Hardware version: V2.2 , Firmware Version: OP_V3.3.1-191028 allows an unauthenticated remote attacker to conduct a cross-site request forgery (CSRF) attack to change the Password f…

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00466 Published 2022-11-23 No fix listed CWE-352
Priority LOW 29

A vulnerability in OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OP_V3.3.1-191028 allows an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack to cause a Denial of Se…

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00489 Published 2022-11-23 No fix listed CWE-352
Priority LOW 20

A vulnerability in OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OP_V3.3.1-191028 allows an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack to "Enable or Disable P…

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00409 Published 2022-11-23 No fix listed CWE-352
Priority LOW 20

A vulnerability found in OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OP_V3.3.1-191028 allows an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack to Add Network Tr…

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00381 Published 2022-11-23 No fix listed CWE-352
Priority LOW 15

A vulnerability found in the OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OP_V3.3.1-191028 allows an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack to men in the…

CVSS 3.1LOW 3.1 Network No auth User interaction EPSS 0.00339 Published 2022-11-23 No fix listed CWE-352
Open these records in search →