Vulnerabilities

TI-2019-10076 CVE-2019-13407 · GHSA-452c-mgc8-crh5

Advan VD-1 has a reflected XSS vulnerability in page cgibin/ssi.cgi

LOW 29

A XSS found in Advan VD-1 firmware versions up to 230.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01053 Published 2019-08-29 No fix listed CWE-79

TI-2019-10075 CVE-2019-13406 · GHSA-j4xp-cc3j-2w8r

LOW 36

A broken access control vulnerability found in Advan VD-1 firmware versions up to 230.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01572 Published 2019-08-29 No fix listed CWE-306

TI-2019-10074 CVE-2019-13405 · GHSA-qv2v-77pv-fhr9

MEDIUM 47

A broken access control vulnerability found in Advan VD-1 firmware version 230 leads to insecure ADB service.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02929 Published 2019-08-29 No fix listed CWE-306

TI-2019-08273 CVE-2019-11064 · GHSA-3q8h-2vx4-hg56

MEDIUM 46

A vulnerability of remote credential disclosure was discovered in Advan VD-1 firmware versions up to 230.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01942 Published 2019-08-29 No fix listed CWE-200

TI-2019-10077 CVE-2019-13408 · GHSA-fwx2-7cx7-p6j5

LOW 37

A relative path traversal vulnerability found in Advan VD-1 firmware versions up to 230.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01913 Published 2019-08-29 No fix listed CWE-23