Vulnerabilities

TI-2023-17053 CVE-2023-34217 · GHSA-9h45-q875-xxrx

Second Order Command-injection Vulnerability in the Certificate-delete Function

LOW 36

TN-4900 Series firmware versions v1.2.4 and prior and TN-5900 Series firmware versions v3.3 and prior are vulnerable to the command-injection vulnerability.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.0045 Published 2023-08-17 No fix listed CWE-22

TI-2023-17052 CVE-2023-34216 · GHSA-82xw-m9w4-2cv9

Second Order Command-injection Vulnerability in the Key-delete Function

LOW 36

TN-4900 Series firmware versions v1.2.4 and prior and TN-5900 Series firmware versions v3.3 and prior are vulnerable to the command-injection vulnerability.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00712 Published 2023-08-17 No fix listed CWE-22

TI-2023-17051 CVE-2023-34215 · GHSA-9vgh-rvm2-h9w8

Second Order Command-injection Vulnerability in the Certificate-generation Function

MEDIUM 44

TN-5900 Series firmware versions v3.3 and prior are vulnerable to the command-injection vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00742 Published 2023-08-17 No fix listed CWE-78

TI-2023-17050 CVE-2023-34214 · GHSA-fhvv-xjvf-6vwj

Second Order Command-injection Vulnerability in the Certificate-generation Function

MEDIUM 43

TN-4900 Series firmware versions v1.2.4 and prior and TN-5900 Series firmware versions v3.3 and prior are vulnerable to the command-injection vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00443 Published 2023-08-17 No fix listed CWE-78

TI-2023-17049 CVE-2023-34213 · GHSA-xhr8-xhpc-4f2q

Second Order Command-injection Vulnerability in the Key-generation Function

MEDIUM 44

TN-5900 Series firmware versions v3.3 and prior are vulnerable to command-injection vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00763 Published 2023-08-17 No fix listed CWE-78

TI-2023-16411 CVE-2023-33239 · GHSA-4m3x-2qcv-fh8q

Second Order Command-injection Vulnerability in the Key-generation Function

MEDIUM 46

TN-4900 Series firmware versions v1.2.4 and prior and TN-5900 Series firmware versions v3.3 and prior are vulnerable to the command injection vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01325 Published 2023-08-17 No fix listed CWE-78

TI-2023-16410 CVE-2023-33238 · GHSA-24m3-rcq7-76r2

Command-injection Vulnerability in Certificate Management

MEDIUM 44

TN-4900 Series firmware versions v1.2.4 and prior and TN-5900 Series firmware versions v3.3 and prior are vulnerable to the command injection vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00823 Published 2023-08-17 No fix listed CWE-78

TI-2023-16409 CVE-2023-33237 · GHSA-p33g-779c-ccmq

Authentication Bypass Without Administrator Privilege

MEDIUM 41

TN-5900 Series firmware version v3.3 and prior is vulnerable to improper-authentication vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00628 Published 2023-08-17 No fix listed CWE-863

Vulnerabilities

Filters