Read the docs

PROLiNK

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical4CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

PROLiNK records in CISA KEV

No PROLiNK vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Prc2402m Firmware 4 records MEDIUM

Records

5 records

TI-2021-14195 CVE-2021-35402 · GHSA-68g8-2724-hq79

OS command injection in PROLiNK PRC2402M

Priority HIGH 82

PROLiNK PRC2402M 20190909 before 2021-06-13 allows live_api.cgi?page=satellite_list OS command injection via shell metacharacters in the ip parameter (for satellite_status).

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.01086 Published 2026-02-20 Fixed in 2021-06-13 CWE-78
TI-2021-14848 CVE-2021-36707 · GHSA-f8hv-38c8-7mr9

In ProLink PRC2402M V1.0.18 and older, the set_ledonoff function in the adm.cgi binary…

Priority MEDIUM 47

In ProLink PRC2402M V1.0.18 and older, the set_ledonoff function in the adm.cgi binary, accessible with a page parameter value of ledonoff contains a trivial command injection where the value of the led_cmd parameter is…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02621 Published 2021-08-06 No fix listed CWE-77
TI-2021-14847 CVE-2021-36706 · GHSA-8g3m-7h36-26g3

In ProLink PRC2402M V1.0.18 and older, the set_sys_cmd function in the adm.cgi binary…

Priority MEDIUM 47

In ProLink PRC2402M V1.0.18 and older, the set_sys_cmd function in the adm.cgi binary, accessible with a page parameter value of sysCMD contains a trivial command injection where the value of the command parameter is pas…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02621 Published 2021-08-06 No fix listed CWE-78
TI-2021-14846 CVE-2021-36705 · GHSA-6f6j-c55c-5gxx

In ProLink PRC2402M V1.0.18 and older, the set_TR069 function in the adm.cgi binary…

Priority MEDIUM 47

In ProLink PRC2402M V1.0.18 and older, the set_TR069 function in the adm.cgi binary, accessible with a page parameter value of TR069 contains a trivial command injection where the value of the TR069_local_port parameter…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02621 Published 2021-08-06 No fix listed CWE-78
Open these records in search →