Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Telstra Component: Arcadyan Lh1000 Firmware Clear all filters
TI-2023-23239 CVE-2023-43478 · GHSA-x2v2-mj6c-wfp3

Unauthenticated configuration restore and firmware update

Priority HIGH 76

fake_upload.cgi on the Telstra Smart Modem Gen 2 (Arcadyan LH1000), firmware versions < 0.18.15r, allows unauthenticated attackers to upload firmware images and configuration backups, which could allow them to alter the…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.17954 Published 2023-09-20 Fixed in 0.18.15r CWE-434
TI-2023-23238 CVE-2023-43477 · GHSA-87jp-gf78-6p6w

Post-Auth Command Injection in Telstra Smart Modem Gen 2 (Arcadyan LH1000)

Priority HIGH 73

The ping_from parameter of ping_tracerte.cgi in the web UI of Telstra Smart Modem Gen 2 (Arcadyan LH1000), firmware versions < 0.18.15r, was not properly sanitized before being used in a system call, which could allow an…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.17674 Published 2023-09-20 Fixed in 0.18.15r CWE-77