Vulnerabilities

TI-2019-05300 CVE-2019-7440 · GHSA-8qmx-q6vc-f5mv

JioFi 4G M2S 1.0.2 devices have CSRF via the SSID name and Security Key field under Edit…

LOW 33

JioFi 4G M2S 1.0.2 devices have CSRF via the SSID name and Security Key field under Edit Wi-Fi Settings (aka a SetWiFi_Setting request to cgi-bin/qcmap_web_cgi).

CVSS 3.0MEDIUM 6.5 Network No auth User interaction EPSS 0.0196 Published 2019-03-20 No fix listed CWE-352

TI-2019-05299 CVE-2019-7439 · GHSA-w622-2pcj-f3x2

cgi-bin/qcmap_web_cgi on JioFi 4G M2S 1.0.2 devices allows a DoS (Hang) via the mask POST parameter.

LOW 36

cgi-bin/qcmap_web_cgi on JioFi 4G M2S 1.0.2 devices allows a DoS (Hang) via the mask POST parameter.

CVSS 3.0MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.04766 Published 2019-03-20 No fix listed

TI-2019-05298 CVE-2019-7438 · GHSA-9j75-r65g-wv9g

cgi-bin/qcmap_web_cgi on JioFi 4G M2S 1.0.2 devices has XSS and HTML injection via the mask POST parameter.

LOW 34

cgi-bin/qcmap_web_cgi on JioFi 4G M2S 1.0.2 devices has XSS and HTML injection via the mask POST parameter.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.03991 Published 2019-03-20 No fix listed CWE-79

Vulnerabilities

Filters

JioFi 4G M2S 1.0.2 devices have CSRF via the SSID name and Security Key field under Edit…

cgi-bin/qcmap_web_cgi on JioFi 4G M2S 1.0.2 devices allows a DoS (Hang) via the mask POST parameter.

cgi-bin/qcmap_web_cgi on JioFi 4G M2S 1.0.2 devices has XSS and HTML injection via the mask POST parameter.