Vulnerabilities

TI-2017-09999 CVE-2017-13724 · GHSA-7575-9jw8-fp9m

On the Axesstel MU553S MU55XS-V1.14, there is a Stored Cross Site Scripting vulnerability…

LOW 25

On the Axesstel MU553S MU55XS-V1.14, there is a Stored Cross Site Scripting vulnerability in the APN parameter under the "Basic Settings" page.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00513 Published 2017-09-13 No fix listed CWE-79

TI-2017-08389 CVE-2017-11351 · GHSA-w498-rr25-2crx

MEDIUM 45

Axesstel MU553S MU55XS-V1.14 devices have a default password of admin for the admin account.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01405 Published 2017-09-13 No fix listed CWE-798

TI-2017-08388 CVE-2017-11350 · GHSA-5hf3-hxrg-36rp

LOW 38

Cross-Site Request Forgery (CSRF) exists in cgi-bin/ConfigSet on Axesstel MU553S MU55XS-V1.14 devices.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00449 Published 2017-09-13 No fix listed CWE-352