Read the docs

PROLiNK

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical4CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

PROLiNK records in CISA KEV

No PROLiNK vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Prc2402m Firmware 4 records MEDIUM

Records

4 records in Prc2402m Firmware · all components

TI-2021-14848 CVE-2021-36707 · GHSA-f8hv-38c8-7mr9

In ProLink PRC2402M V1.0.18 and older, the set_ledonoff function in the adm.cgi binary…

Priority MEDIUM 47

In ProLink PRC2402M V1.0.18 and older, the set_ledonoff function in the adm.cgi binary, accessible with a page parameter value of ledonoff contains a trivial command injection where the value of the led_cmd parameter is…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02621 Published 2021-08-06 No fix listed CWE-77
TI-2021-14847 CVE-2021-36706 · GHSA-8g3m-7h36-26g3

In ProLink PRC2402M V1.0.18 and older, the set_sys_cmd function in the adm.cgi binary…

Priority MEDIUM 47

In ProLink PRC2402M V1.0.18 and older, the set_sys_cmd function in the adm.cgi binary, accessible with a page parameter value of sysCMD contains a trivial command injection where the value of the command parameter is pas…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02621 Published 2021-08-06 No fix listed CWE-78
TI-2021-14846 CVE-2021-36705 · GHSA-6f6j-c55c-5gxx

In ProLink PRC2402M V1.0.18 and older, the set_TR069 function in the adm.cgi binary…

Priority MEDIUM 47

In ProLink PRC2402M V1.0.18 and older, the set_TR069 function in the adm.cgi binary, accessible with a page parameter value of TR069 contains a trivial command injection where the value of the TR069_local_port parameter…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02621 Published 2021-08-06 No fix listed CWE-78
Open these records in search →