Vulnerabilities

TI-2026-03942 CVE-2026-4537 · GHSA-cgfg-qq46-f464

Cudy TR1200 ipsec.lua action_ipsec_conn command injection

MEDIUM 56

A vulnerability was determined in Cudy TR1200 R46-2.4.15-20250721-164017.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.09752 Published 2026-03-22 No fix listed CWE-74

TI-2025-10202 CVE-2025-11134 · GHSA-2p84-c7q3-mfpw

MEDIUM 55

A security vulnerability has been detected in Cudy TR1200 1.16.3-20230804-164635.

CVSS 4.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.00267 Published 2025-09-29 No fix listed CWE-79

TI-2025-08915 CVE-2025-9725 · GHSA-whjv-65hm-x47g

MEDIUM 44

A vulnerability was identified in Cudy LT500E up to 2.3.12.

CVSS 4.0LOW 2.0 Local Low privileges No interaction EPSS 0.0037 Published 2025-08-31 Fixed in 2.3.13 CWE-255

TI-2025-08782 CVE-2025-9589 · GHSA-gq6c-4c55-cxrw

MEDIUM 44

A vulnerability was determined in Cudy WR1200EA 2.3.7-20250113-121810.

CVSS 4.0LOW 2.0 Local Low privileges No interaction EPSS 0.00133 Published 2025-08-28 No fix listed CWE-1393

TI-2023-15241 CVE-2023-31853 · GHSA-xh64-ffcx-p82v

MEDIUM 60

Cudy LT400 1.13.4 is vulnerable Cross Site Scripting (XSS) in /cgi-bin/luci/admin/network/bandwidth via the icon parameter.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00499 Published 2023-07-17 No fix listed CWE-79

TI-2023-15240 CVE-2023-31852 · GHSA-8gj8-6pr8-hxpm

MEDIUM 60

Cudy LT400 1.13.4 is vulnerable to Cross Site Scripting (XSS) in cgi-bin/luci/admin/network/wireless/config via the iface parameter.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00672 Published 2023-07-17 No fix listed CWE-79

TI-2023-15239 CVE-2023-31851 · GHSA-x5hv-w3m8-3mj8

MEDIUM 60

Cudy LT400 1.13.4 is has a cross-site scripting (XSS) vulnerability in /cgi-bin/luci/admin/network/wireless/status via the iface parameter.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00499 Published 2023-07-17 No fix listed CWE-79