Priority HIGH 77
Unauthenticated remote code execution in OPTILINK OP-XT71000N, Hardware Version: V2.2 occurs when the attacker passes arbitrary commands with IP-ADDRESS using " | " to execute commands on " /diag_tracert_admin.asp " in t…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.41443 · Published 2022-11-23 · No fix listed CWE-77
Priority MEDIUM 53
OPTILINK OP-XT71000N V2.2 is vulnerable to Remote Code Execution.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02354 · Published 2022-11-23 · No fix listed CWE-77
Priority MEDIUM 44
A vulnerability in OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OP_V3.3.1-191028 allows an attacker to upload arbitrary files through " /mgm_dev_upgrade.asp " which can "delete every file for Denial of…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01184 · Published 2022-11-23 · No fix listed CWE-434
Priority MEDIUM 41
A remote attacker can conduct a cross-site request forgery (CSRF) attack on OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OP_V3.3.1-191028.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00562 · Published 2022-11-23 · No fix listed CWE-352
Priority LOW 39
A vulnerability in OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OP_V3.3.1-191028 allows an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack to Reset ONU to Factory…
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.0058 · Published 2022-11-23 · No fix listed CWE-352
Priority LOW 29
A vulnerability in OPTILINK OP-XT71000N Hardware Version: V2.2, Firmware Version: OP_V3.3.1-191028 allows an unauthenticated, remote attacker to conduct a cross site request forgery (CSRF) attack to enable syslog mode th…
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00473 · Published 2022-11-23 · No fix listed CWE-352
Priority LOW 29
A vulnerability in Optilink OP-XT71000N Hardware version: V2.2 , Firmware Version: OP_V3.3.1-191028 allows an unauthenticated remote attacker to conduct a cross-site request forgery (CSRF) attack to change the Password f…
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00466 · Published 2022-11-23 · No fix listed CWE-352
Priority LOW 29
A vulnerability in OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OP_V3.3.1-191028 allows an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack to cause a Denial of Se…
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00489 · Published 2022-11-23 · No fix listed CWE-352
Priority LOW 29
A vulnerability in the "/admin/wlmultipleap.asp" of optilink OP-XT71000N version: V2.2 could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack to create Multiple WLAN BSSID.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00466 · Published 2022-11-21 · No fix listed CWE-352
Priority LOW 20
A vulnerability in OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OP_V3.3.1-191028 allows an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack to "Enable or Disable P…
CVSS 3.1MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.00409 · Published 2022-11-23 · No fix listed CWE-352
Priority LOW 20
A vulnerability found in OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OP_V3.3.1-191028 allows an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack to Add Network Tr…
CVSS 3.1MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.00381 · Published 2022-11-23 · No fix listed CWE-352
Priority LOW 15
A vulnerability found in the OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OP_V3.3.1-191028 allows an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack to men in the…
CVSS 3.1LOW 3.1· Network · No auth · User interaction · EPSS 0.00339 · Published 2022-11-23 · No fix listed CWE-352