Priority LOW 21
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in AirTies Air4443 Firmware allows Cross-Site Scripting (XSS).
CVSS 4.0MEDIUM 4.6· Local · High privileges · No interaction · EPSS 0.00201 · Published 2024-11-13 · No fix listed CWE-79
Priority MEDIUM 42
An issue was discovered in Airties Smart Wi-Fi before 2020-08-04.
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.01136 · Published 2022-09-15 · No fix listed CWE-639
Priority MEDIUM 53
AirTies Air5341 1.0.0.12 devices allow cgi-bin/login CSRF.
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.13497 · Published 2019-03-17 · No fix listed CWE-352
Priority LOW 29
AirTies Air 5443v2 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter.
CVSS 3.0MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00988 · Published 2018-10-02 · No fix listed CWE-79
Priority LOW 32
AirTies Air 5453 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter.
CVSS 3.0MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.02297 · Published 2018-10-02 · No fix listed CWE-79
Priority LOW 32
AirTies Air 5343v2 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter.
CVSS 3.0MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.02297 · Published 2018-10-02 · No fix listed CWE-79
Priority LOW 32
AirTies Air 5442 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter.
CVSS 3.0MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.02297 · Published 2018-10-02 · No fix listed CWE-79
Priority LOW 29
AirTies Air 5650 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter.
CVSS 3.0MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00998 · Published 2018-10-02 · No fix listed CWE-79
Priority LOW 32
AirTies Air 5021 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter.
CVSS 3.0MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.02321 · Published 2018-10-02 · No fix listed CWE-79
Priority LOW 32
AirTies Air 5750 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter.
CVSS 3.0MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.02321 · Published 2018-10-02 · No fix listed CWE-79
Priority LOW 32
Airties 5444 1.0.0.18 and 5444TT 1.0.0.18 devices allow XSS.
CVSS 3.0MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.02273 · Published 2018-07-05 · No fix listed CWE-79
Priority LOW 23
Multiple cross-site scripting (XSS) vulnerabilities in the web interface in Airties RT-210 allow remote attackers to inject arbitrary web script or HTML via the (1) ddns_domainame or (2) ddns_account parameter to ddns.st…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.01457 · Published 2015-06-19 · No fix listed CWE-79
Priority HIGH 82
Stack-based buffer overflow in AirTies Air 6372, 5760, 5750, 5650TT, 5453, 5444TT, 5443, 5442, 5343, 5342, 5341, and 5021 DSL modems with firmware 1.0.2.0 and earlier allows remote attackers to execute arbitrary code via…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.7771 · Published 2015-06-19 · No fix listed CWE-119
Priority LOW 23
Cross-site scripting (XSS) vulnerability in top.html in the Airties Air 6372 modem allows remote attackers to inject arbitrary web script or HTML via the productboardtype parameter.
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.01427 · Published 2015-01-13 · No fix listed CWE-79
Priority LOW 28
AirTies Air 4450 1.1.2.18 allows remote attackers to cause a denial of service (reboot) via a direct request to cgi-bin/loader.
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.02712 · Published 2012-01-20 · No fix listed
THREATIST.IORead the docs