Vulnerabilities

TI-2019-15536 CVE-2019-25483 · GHSA-qrj9-r3jx-p4gc

Comtrend AR-5310 GE31-412SSG-C01_R10.A2pG039u.d24k Restricted Shell Escape

HIGH 72

Comtrend AR-5310 GE31-412SSG-C01_R10.A2pG039u.d24k contains a restricted shell escape vulnerability that allows local users to bypass command restrictions by using the command substitution operator $( ).

CVSS 4.0HIGH 8.6 Local No auth No interaction EPSS 0.00146 Published 2026-03-11 No fix listed CWE-306

TI-2024-05365 CVE-2024-5786 · GHSA-mx85-w6rx-pfvf

Cross-site request forgery in Comtrend WLD71-T1_v2.0.201820

LOW 28

Cross-Site Request Forgery vulnerability in Comtrend router WLD71-T1_v2.0.201820, affecting the GRG-4280us version.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00184 Published 2024-06-10 No fix listed CWE-352

TI-2024-05364 CVE-2024-5785 · GHSA-9mrw-6xpv-33mx

OS command injection in Comtrend WLD71-T1_v2.0.201820

LOW 39

Command injection vulnerability in Comtrend router WLD71-T1_v2.0.201820, affecting the GRG-4280us version.

CVSS 3.1HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.00885 Published 2024-06-10 No fix listed CWE-78

TI-2018-05834 CVE-2018-8062 · GHSA-vcrq-gh6q-6p2f

A cross-site scripting (XSS) vulnerability on Comtrend AR-5387un devices with…

LOW 26

A cross-site scripting (XSS) vulnerability on Comtrend AR-5387un devices with A731-410JAZ-C04_R02.A2pD035g.d23i firmware allows remote attackers to inject arbitrary web script or HTML via the Service Description paramete…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00974 Published 2020-10-23 No fix listed CWE-79

TI-2020-08200 CVE-2020-10173 · GHSA-9695-x59r-82q9

Comtrend VR-3033 DE11-416SSG-C01_R02.A2pvI042j1.d26m devices have Multiple Authenticated…

HIGH 77

Comtrend VR-3033 DE11-416SSG-C01_R02.A2pvI042j1.d26m devices have Multiple Authenticated Command Injection vulnerabilities via the ping and traceroute diagnostic pages, as demonstrated by shell metacharacters in the ping…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.77129 Published 2020-03-05 No fix listed CWE-78

TI-2018-14441 CVE-2018-20388 · GHSA-8rw6-gj69-wxhc

Comtrend CM-6200un 123.447.007 and CM-6300n 123.553mp1.005 devices allow remote attackers…

MEDIUM 45

Comtrend CM-6200un 123.447.007 and CM-6300n 123.553mp1.005 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01513 Published 2018-12-23 No fix listed CWE-522

TI-2010-00447 CVE-2010-0470 · GHSA-p65f-qm2h-fr27

Cross-site scripting (XSS) vulnerability in scvrtsrv.cmd in Comtrend CT-507IT ADSL Router…

LOW 23

Cross-site scripting (XSS) vulnerability in scvrtsrv.cmd in Comtrend CT-507IT ADSL Router allows remote attackers to inject arbitrary web script or HTML via the srvName parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01453 Published 2010-02-02 No fix listed CWE-79