Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

6 records

Vendor: NetModule Component: Netmodule Router Software Clear all filters
TI-2023-24920 CVE-2023-46306 · GHSA-4qww-v3r6-7335

The web administration interface in NetModule Router Software (NRSW) 4.6 before 4.6.0.106…

Priority HIGH 72

The web administration interface in NetModule Router Software (NRSW) 4.6 before 4.6.0.106 and 4.8 before 4.8.0.101 executes an OS command constructed with unsanitized user input: shell metacharacters in the /admin/gnssAu…

CVSS 3.1HIGH 8.4 Adjacent network High privileges No interaction EPSS 0.01247 Published 2023-10-22 No fix listed CWE-78
TI-2023-00817 CVE-2023-0862 · GHSA-hp6q-h54g-hcww

Path Traversal in NetModule NSRW

Priority HIGH 73

The NetModule NSRW web administration interface is vulnerable to path traversals, which could lead to arbitrary file uploads and deletion.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02353 Published 2023-02-16 Fixed in 4.3.0.119, 4.4.0.118 +2 CWE-22
TI-2023-00816 CVE-2023-0861 · GHSA-2w6q-88hw-j7gp

Authenticated Command Injection in NetModule NSRW

Priority HIGH 73

NetModule NSRW web administration interface executes an OS command constructed with unsanitized user input.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.28655 Published 2023-02-16 Fixed in 4.3.0.119, 4.4.0.118 +2 CWE-77
TI-2021-16664 CVE-2021-39289 · GHSA-55w8-xhrf-5797

Certain NetModule devices have Insecure Password Handling (cleartext or reversible…

Priority LOW 35

Certain NetModule devices have Insecure Password Handling (cleartext or reversible encryption), These models with firmware before 4.3.0.113, 4.4.0.111, and 4.5.0.105 are affected: NB800, NB1600, NB1601, NB1800, NB1810, N…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01078 Published 2021-08-23 No fix listed CWE-522