Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Priority MEDIUM 40

An unauthenticated remote attacker can exploit a denial-of-service vulnerability in the device's web server functionality by sending a specially crafted HTTP request with a malicious header, potentially causing the serve…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0062 Published 2025-05-27 Fixed in 3.6.32, 3.5.36 +3 CWE-410
Priority MEDIUM 50

Due to missing authentication on a critical function of the devices an unauthenticated remote attacker can execute arbitrary commands, potentially enabling unauthorized upload or download of configuration files and leadi…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00642 Published 2025-05-27 Fixed in 3.6.32, 3.5.36 +3 CWE-306
Priority LOW 39

An unauthenticated remote attacker can exploit input validation in cmd services of the devices, allowing them to disrupt system operations and potentially cause a denial-of-service.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00521 Published 2025-05-27 Fixed in 3.6.32, 3.5.36 +3 CWE-1287
Priority LOW 39

An unauthenticated remote attacker can exploit insufficient input validation to write data beyond the bounds of a buffer, potentially leading to a denial-of-service condition for the devices.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00521 Published 2025-05-27 Fixed in 3.6.32, 3.5.36 +3 CWE-787