Read the docs

Telstra

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Telstra records in CISA KEV

No Telstra vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Arcadyan Lh1000 Firmware 2 records HIGH

Records

4 records

TI-2023-23239 CVE-2023-43478 · GHSA-x2v2-mj6c-wfp3

Unauthenticated configuration restore and firmware update

Priority HIGH 76

fake_upload.cgi on the Telstra Smart Modem Gen 2 (Arcadyan LH1000), firmware versions < 0.18.15r, allows unauthenticated attackers to upload firmware images and configuration backups, which could allow them to alter the…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.17954 Published 2023-09-20 Fixed in 0.18.15r CWE-434
TI-2023-23238 CVE-2023-43477 · GHSA-87jp-gf78-6p6w

Post-Auth Command Injection in Telstra Smart Modem Gen 2 (Arcadyan LH1000)

Priority HIGH 73

The ping_from parameter of ping_tracerte.cgi in the web UI of Telstra Smart Modem Gen 2 (Arcadyan LH1000), firmware versions < 0.18.15r, was not properly sanitized before being used in a system call, which could allow an…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.17674 Published 2023-09-20 Fixed in 0.18.15r CWE-77
TI-2025-00591 CVE-2025-0697 · GHSA-rpcx-p9vc-6cq7

Telstra Smart Modem Gen 2 HTTP Header injection

Priority HIGH 70

A vulnerability, which was classified as problematic, was found in Telstra Smart Modem Gen 2 up to 20250115.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00486 Published 2025-01-24 No fix listed CWE-707
TI-2025-34697 CVE-2025-54992

OpenKilda XXE in SAML configuration

Priority LOW 31

OpenKilda is an open-source OpenFlow controller.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00449 Published 2025-08-11 Fixed in 1.164.0 CWE-611
Open these records in search →