Vulnerabilities

TI-2019-05459 CVE-2019-7746 · GHSA-wwj4-pqg8-68wr

JioFi 4 jmr1140 Amtel_JMR1140_R12.07 devices allow remote attackers to obtain an admin…

LOW 37

JioFi 4 jmr1140 Amtel_JMR1140_R12.07 devices allow remote attackers to obtain an admin token by making a /cgi-bin/qcmap_auth type=getuser request and then reading the token field.

CVSS 3.0HIGH 8.1 Network No auth User interaction EPSS 0.01058 Published 2019-05-07 No fix listed CWE-352

TI-2019-05458 CVE-2019-7745 · GHSA-75v7-h9gp-f766

JioFi 4 jmr1140 Amtel_JMR1140_R12.07 devices allow remote attackers to obtain the Wi-Fi…

MEDIUM 49

JioFi 4 jmr1140 Amtel_JMR1140_R12.07 devices allow remote attackers to obtain the Wi-Fi password by making a cgi-bin/qcmap_web_cgi Page=GetWiFi_Setting request and then reading the wpa_security_key field.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03807 Published 2019-05-07 No fix listed

TI-2019-05418 CVE-2019-7687 · GHSA-2cxx-gfmw-p9v8

cgi-bin/qcmap_web_cgi on JioFi 4 jmr1140 Amtel_JMR1140_R12.07 devices has POST based…

LOW 30

cgi-bin/qcmap_web_cgi on JioFi 4 jmr1140 Amtel_JMR1140_R12.07 devices has POST based reflected XSS via the Page parameter.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.0155 Published 2019-05-07 No fix listed CWE-79

Vulnerabilities

Filters

JioFi 4 jmr1140 Amtel_JMR1140_R12.07 devices allow remote attackers to obtain an admin…

JioFi 4 jmr1140 Amtel_JMR1140_R12.07 devices allow remote attackers to obtain the Wi-Fi…

cgi-bin/qcmap_web_cgi on JioFi 4 jmr1140 Amtel_JMR1140_R12.07 devices has POST based…