Vendors / Quectel Records 4 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 3
CVSS high 0
Exploited now Quectel records in CISA KEV No Quectel vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 82
OS Command Injection vulnerability in quectel AG550QCN allows attackers to execute arbitrary commands via ql_atfwd.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02692 · Published 2023-04-04 · No fix listed CWE-78
Priority MEDIUM 47
The Quectel RG502Q-EA modem before 2022-02-23 allow OS Command Injection.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02654 · Published 2022-06-21 · No fix listed CWE-78
Priority MEDIUM 46
Quectel EG25-G devices through 202006130814 allow executing arbitrary code remotely by using an AT command to place shell metacharacters in quectel_handle_fumo_cfg input in atfwd_daemon.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01997 · Published 2021-08-12 · No fix listed CWE-78
Priority LOW 28
Quectel UC20 UMTS/HSPA+ UC20 6.3.14 is affected by a Cross Site Scripting (XSS) vulnerability.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00581 · Published 2021-12-30 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
3 0 1 0 0
