Orange

Records8All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high4CVSS 7.0–8.9

Exploited now

Orange records in CISA KEV

No Orange vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Arv7519rw22 Livebox 2.1 Firmware 4 records MEDIUM Airbox Firmware 3 records MEDIUM Livebox 1.1 Firmware 1 record MEDIUM

Records

3 records in Airbox Firmware · all components

TI-2018-12993 CVE-2018-18375 · GHSA-mpwr-mcf8-j693

goform/getProfileList in Orange AirBox Y858_FL_01.16_04 allows attackers to extract APN…

MEDIUM 45

goform/getProfileList in Orange AirBox Y858_FL_01.16_04 allows attackers to extract APN data (name, number, username, and password) via the rand parameter.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.013 Published 2018-10-16 No fix listed CWE-330

TI-2018-12994 CVE-2018-18376 · GHSA-975f-m9xw-7g52

goform/getWlanClientInfo in Orange AirBox Y858_FL_01.16_04 allows remote attackers to…

LOW 36

goform/getWlanClientInfo in Orange AirBox Y858_FL_01.16_04 allows remote attackers to discover information about currently connected devices (hostnames, IP addresses, MAC addresses, and connection time) via the rand para…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01518 Published 2018-10-16 No fix listed CWE-200

TI-2018-12995 CVE-2018-18377 · GHSA-4rmw-q3pr-hv24

goform/setReset on Orange AirBox Y858_FL_01.16_04 devices allows attackers to reset a…

LOW 35

goform/setReset on Orange AirBox Y858_FL_01.16_04 devices allows attackers to reset a router to factory settings, which can be used to login using the default admin:admin credentials.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.00919 Published 2018-10-16 No fix listed CWE-862

Open these records in search →

Critical	3
High	4
Medium	1
Low	0
No CVSS	0