Swisscom

Records9All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high7CVSS 7.0–8.9

Exploited now

Swisscom records in CISA KEV

No Swisscom vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Centro Grande Firmware 4 records LOW Internet-box 2 Firmware 2 records LOW Internet-box Light Firmware 2 records LOW Internet-box Plus Firmware 2 records LOW Internet-box Standard Firmware 2 records LOW Centro Business 1 record LOW Internet-box 3 Firmware 1 record LOW Myswisscomassistant 1 record LOW

Records

4 records in Centro Grande Firmware · all components

TI-2019-14379 CVE-2019-19940 · GHSA-qfx5-4hqg-m5vm

Incorrect input sanitation in text-oriented user interfaces (telnet, ssh) in Swisscom…

LOW 39

Incorrect input sanitation in text-oriented user interfaces (telnet, ssh) in Swisscom Centro Grande before 6.16.12 allows remote authenticated users to execute arbitrary commands via command injection.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.04958 Published 2020-03-16 No fix listed CWE-78

TI-2019-14381 CVE-2019-19942 · GHSA-8x86-j4v3-7xf3

Missing output sanitation in Swisscom Centro Grande Centro Grande before 6.16.12, Centro…

LOW 36

Missing output sanitation in Swisscom Centro Grande Centro Grande before 6.16.12, Centro Business 1.0 (ADB) before 7.10.18, and Centro Business 2.0 before 8.02.04 allows a remote attacker to perform DNS spoofing against…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0167 Published 2020-03-16 No fix listed CWE-20

TI-2015-01071 CVE-2015-1188 · GHSA-c68q-63jv-vcgp

The certificate verification functions in the HNDS service in Swisscom Centro Grande…

LOW 34

The certificate verification functions in the HNDS service in Swisscom Centro Grande (ADB) DSL routers with firmware before 6.14.00 allows remote attackers to access the management functions via unknown vectors.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00855 Published 2015-05-20 No fix listed

TI-2019-14380 CVE-2019-19941 · GHSA-pc2g-7fx7-8p9p

Missing hostname validation in Swisscom Centro Grande before 6.16.12 allows a remote…

LOW 26

Missing hostname validation in Swisscom Centro Grande before 6.16.12 allows a remote attacker to inject its local IP address as a domain entry in the DNS service of the router via crafted hostnames in DHCP requests, caus…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00669 Published 2020-03-16 No fix listed CWE-79

Open these records in search →

Critical	0
High	7
Medium	2
Low	0
No CVSS	0