Read the docs

Anhui Seeker Electronic Technology Co., LTD.

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Anhui Seeker Electronic Technology Co., LTD. records in CISA KEV

No Anhui Seeker Electronic Technology Co., LTD. vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Zikestor Sks8310-8x Firmware 4 records MEDIUM

Records

4 records

TI-2026-20251 CVE-2026-25070 · GHSA-fv5f-w79h-cj2p

XikeStor SKS8310-8X PingTestSet Command Injection

Priority MEDIUM 54

XikeStor SKS8310-8X Network Switch firmware versions 1.04.B07 and prior contain an OS command injection vulnerability in the /goform/PingTestSet endpoint that allows unauthenticated remote attackers to execute arbitrary…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.03306 Published 2026-03-07 No fix listed CWE-78
TI-2026-20252 CVE-2026-25071 · GHSA-48cc-qpxg-8w25

XikeStor SKS8310-8X switch_config.src Missing Authentication

Priority MEDIUM 45

XikeStor SKS8310-8X Network Switch firmware versions 1.04.B07 and prior contain a missing authentication vulnerability in the /switch_config.src endpoint that allows unauthenticated remote attackers to download device co…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00595 Published 2026-03-07 No fix listed CWE-306
TI-2026-20253 CVE-2026-25072 · GHSA-94rf-v38j-r4r9

XikeStor SKS8310-8X Predictable Session Identifiers

Priority MEDIUM 40

XikeStor SKS8310-8X Network Switch firmware versions 1.04.B07 and prior contain a predictable session identifier vulnerability in the /goform/SetLogin endpoint that allows remote attackers to hijack authenticated session…

CVSS 4.0HIGH 8.6 Network No auth User interaction EPSS 0.00563 Published 2026-03-07 No fix listed CWE-330
TI-2026-20254 CVE-2026-25073 · GHSA-72gc-g5j4-jr36

XikeStor SKS8310-8X Stored XSS via System Name

Priority LOW 23

XikeStor SKS8310-8X Network Switch firmware versions 1.04.B07 and prior contain a stored cross-site scripting vulnerability that allows authenticated attackers to inject arbitrary script content through the System Name f…

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00212 Published 2026-03-07 No fix listed CWE-79
Open these records in search →