Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

5 records

Vendor: Verizon Component: Lvskihp Indoorunit Firmware Clear all filters
TI-2022-11123 CVE-2022-28369 · GHSA-wq6g-8jqw-w27p

Verizon 5G Home LVSKIHP InDoorUnit (IDU) 3.4.66.162 does not validate the user-provided…

Priority MEDIUM 45

Verizon 5G Home LVSKIHP InDoorUnit (IDU) 3.4.66.162 does not validate the user-provided URL within the crtcmode function's enable_ssh sub-operation of the crtcrpc JSON listener (found at /lib/functions/wnc_jsonsh/crtcmod…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01506 Published 2022-07-14 No fix listed CWE-434
TI-2022-11127 CVE-2022-28373 · GHSA-67f3-wxj2-v4p8

Verizon 5G Home LVSKIHP InDoorUnit (IDU) 3.4.66.162 does not properly sanitize…

Priority MEDIUM 47

Verizon 5G Home LVSKIHP InDoorUnit (IDU) 3.4.66.162 does not properly sanitize user-controlled parameters within the crtcreadpartition function of the crtcrpc JSON listener in /usr/lib/lua/luci/crtc.lua.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02346 Published 2022-07-14 No fix listed CWE-78