Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: FUJI SOFT INCORPORATED Component: Fs040u Firmware Clear all filters
TI-2022-21262 CVE-2022-43470 · GHSA-m554-rhfc-2hcg

Cross-site request forgery in FUJI SOFT INCORPORATED +F FS040U, +F FS020W, +F FS030W, and…

Priority LOW 34

Cross-site request forgery (CSRF) vulnerability in +F FS040U software versions v2.3.4 and earlier, +F FS020W software versions v4.0.0 and earlier, +F FS030W software versions v3.3.5 and earlier, and +F FS040W software ve…

CVSS 3.1HIGH 7.3 Adjacent network No auth User interaction EPSS 0.00233 Published 2022-12-05 No fix listed CWE-352
TI-2022-21237 CVE-2022-43442 · GHSA-8m8p-mfww-c2cg

Insufficiently protected credentials in FUJI SOFT INCORPORATED +F FS040U software

Priority LOW 21

Plaintext storage of a password vulnerability exists in +F FS040U software versions v2.3.4 and earlier, which may allow an attacker to obtain the login password of +F FS040U and log in to the management console.

CVSS 3.1MEDIUM 4.6 Physical No auth No interaction EPSS 0.00306 Published 2022-12-05 No fix listed CWE-522