Vulnerabilities

TI-2019-10076 CVE-2019-13407 · GHSA-452c-mgc8-crh5

Advan VD-1 has a reflected XSS vulnerability in page cgibin/ssi.cgi

LOW 29

A XSS found in Advan VD-1 firmware versions up to 230.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01053 Published 2019-08-29 No fix listed CWE-79

TI-2019-08273 CVE-2019-11064 · GHSA-3q8h-2vx4-hg56

MEDIUM 46

A vulnerability of remote credential disclosure was discovered in Advan VD-1 firmware versions up to 230.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01942 Published 2019-08-29 No fix listed CWE-200

TI-2019-10077 CVE-2019-13408 · GHSA-fwx2-7cx7-p6j5

LOW 37

A relative path traversal vulnerability found in Advan VD-1 firmware versions up to 230.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01913 Published 2019-08-29 No fix listed CWE-23