Trivum

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical4CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Trivum records in CISA KEV

No Trivum vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

C4 Professional Firmware 3 records MEDIUM Webtouch Setup V9 Firmware 2 records HIGH

Records

5 records

TI-2018-10052 CVE-2018-13862 · GHSA-6p3h-x2q8-856f

Touchpad / Trivum WebTouch Setup V9 V2.53 build 13163 of Apr 6 2018 09:10:14 (FW 303)…

HIGH 73

Touchpad / Trivum WebTouch Setup V9 V2.53 build 13163 of Apr 6 2018 09:10:14 (FW 303) allow unauthorized remote attackers to reset the authentication via the "/xml/system/setAttribute.xml" URL, using the GET request "?id…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.4929 Published 2018-07-17 No fix listed

TI-2018-10049 CVE-2018-13859 · GHSA-pmjj-fc6g-g96r

MusicCenter / Trivum Multiroom Setup Tool V8.76 - SNR 8604.26 - C4 Professional before…

MEDIUM 59

MusicCenter / Trivum Multiroom Setup Tool V8.76 - SNR 8604.26 - C4 Professional before V9.34 build 13381 - 12.07.18, allow unauthorized remote attackers to reset the authentication via the "/xml/system/setAttribute.xml"…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.17232 Published 2018-07-17 No fix listed

TI-2018-10051 CVE-2018-13861 · GHSA-j8mx-86pp-hqpr

Touchpad / Trivum WebTouch Setup V9 V2.53 build 13163 of Apr 6 2018 09:10:14 (FW 303)…

MEDIUM 46

Touchpad / Trivum WebTouch Setup V9 V2.53 build 13163 of Apr 6 2018 09:10:14 (FW 303) allows unauthorized remote attackers to reboot or execute other functions via the "/xml/system/control.xml" URL, using the GET request…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02274 Published 2018-07-17 No fix listed

TI-2018-10048 CVE-2018-13858 · GHSA-564x-4v7m-c3w2

MusicCenter / Trivum Multiroom Setup Tool V8.76 - SNR 8604.26 - C4 Professional allows…

MEDIUM 46

MusicCenter / Trivum Multiroom Setup Tool V8.76 - SNR 8604.26 - C4 Professional allows unauthorized remote attackers to reboot or execute other functions via the "/xml/system/control.xml" URL, using the GET request "?act…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02274 Published 2018-07-17 No fix listed

TI-2018-10050 CVE-2018-13860 · GHSA-36wx-38c5-qgh9

MusicCenter / Trivum Multiroom Setup Tool V8.76 - SNR 8604.26 - C4 Professional before…

LOW 36

MusicCenter / Trivum Multiroom Setup Tool V8.76 - SNR 8604.26 - C4 Professional before V9.34 build 13381 - 12.07.18 allows unauthorized remote attackers to obtain sensitive information via the "/xml/menu/getObjectEditor.…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01405 Published 2018-07-17 No fix listed CWE-200

Open these records in search →

Critical	4
High	1
Medium	0
Low	0
No CVSS	0