Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: PROLiNK Component: Prc2402m Firmware Clear all filters
TI-2021-14848 CVE-2021-36707 · GHSA-f8hv-38c8-7mr9

In ProLink PRC2402M V1.0.18 and older, the set_ledonoff function in the adm.cgi binary…

Priority MEDIUM 47

In ProLink PRC2402M V1.0.18 and older, the set_ledonoff function in the adm.cgi binary, accessible with a page parameter value of ledonoff contains a trivial command injection where the value of the led_cmd parameter is…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02621 Published 2021-08-06 No fix listed CWE-77
TI-2021-14847 CVE-2021-36706 · GHSA-8g3m-7h36-26g3

In ProLink PRC2402M V1.0.18 and older, the set_sys_cmd function in the adm.cgi binary…

Priority MEDIUM 47

In ProLink PRC2402M V1.0.18 and older, the set_sys_cmd function in the adm.cgi binary, accessible with a page parameter value of sysCMD contains a trivial command injection where the value of the command parameter is pas…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02621 Published 2021-08-06 No fix listed CWE-78
TI-2021-14846 CVE-2021-36705 · GHSA-6f6j-c55c-5gxx

In ProLink PRC2402M V1.0.18 and older, the set_TR069 function in the adm.cgi binary…

Priority MEDIUM 47

In ProLink PRC2402M V1.0.18 and older, the set_TR069 function in the adm.cgi binary, accessible with a page parameter value of TR069 contains a trivial command injection where the value of the TR069_local_port parameter…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02621 Published 2021-08-06 No fix listed CWE-78