Trivum

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical4CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Trivum records in CISA KEV

No Trivum vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

C4 Professional Firmware 3 records MEDIUM Webtouch Setup V9 Firmware 2 records HIGH

Records

3 records in C4 Professional Firmware · all components

TI-2018-10049 CVE-2018-13859 · GHSA-pmjj-fc6g-g96r

MusicCenter / Trivum Multiroom Setup Tool V8.76 - SNR 8604.26 - C4 Professional before…

MEDIUM 59

MusicCenter / Trivum Multiroom Setup Tool V8.76 - SNR 8604.26 - C4 Professional before V9.34 build 13381 - 12.07.18, allow unauthorized remote attackers to reset the authentication via the "/xml/system/setAttribute.xml"…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.17232 Published 2018-07-17 No fix listed

TI-2018-10048 CVE-2018-13858 · GHSA-564x-4v7m-c3w2

MusicCenter / Trivum Multiroom Setup Tool V8.76 - SNR 8604.26 - C4 Professional allows…

MEDIUM 46

MusicCenter / Trivum Multiroom Setup Tool V8.76 - SNR 8604.26 - C4 Professional allows unauthorized remote attackers to reboot or execute other functions via the "/xml/system/control.xml" URL, using the GET request "?act…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02274 Published 2018-07-17 No fix listed

TI-2018-10050 CVE-2018-13860 · GHSA-36wx-38c5-qgh9

MusicCenter / Trivum Multiroom Setup Tool V8.76 - SNR 8604.26 - C4 Professional before…

LOW 36

MusicCenter / Trivum Multiroom Setup Tool V8.76 - SNR 8604.26 - C4 Professional before V9.34 build 13381 - 12.07.18 allows unauthorized remote attackers to obtain sensitive information via the "/xml/menu/getObjectEditor.…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01405 Published 2018-07-17 No fix listed CWE-200

Open these records in search →

Critical	4
High	1
Medium	0
Low	0
No CVSS	0