TI-2018-07437 CVE-2018-10532 · GHSA-8fjf-fj7q-hpwv
An issue was discovered on EE 4GEE HH70VB-2BE8GB3 HH70_E1_02.00_19 devices.
Priority MEDIUM 43
An issue was discovered on EE 4GEE HH70VB-2BE8GB3 HH70_E1_02.00_19 devices.
Vulnerabilities
5 records
TI-2018-10271 CVE-2018-14327 · GHSA-gffw-36xc-qj42
The installer for the Alcatel OSPREY3_MINI Modem component on EE EE40VB 4G mobile…
Priority MEDIUM 41
The installer for the Alcatel OSPREY3_MINI Modem component on EE EE40VB 4G mobile broadband modems with firmware before EE40_00_02.00_45 sets weak permissions (Everyone:Full Control) for the "Web Connecton\EE40" and "Web…
TI-2017-10389 CVE-2017-14269 · GHSA-3m46-mqf2-cgqp
EE 4GEE WiFi MBB (before EE60_00_05.00_31) devices allow remote attackers to obtain…
Priority MEDIUM 45
EE 4GEE WiFi MBB (before EE60_00_05.00_31) devices allow remote attackers to obtain sensitive information via a JSONP endpoint, as demonstrated by passwords and SMS content.
TI-2017-10388 CVE-2017-14268 · GHSA-fqc4-vrq2-9gcp
EE 4GEE WiFi MBB (before EE60_00_05.00_31) devices have XSS in the sms_content parameter in a getSMSlist request.
Priority LOW 28
EE 4GEE WiFi MBB (before EE60_00_05.00_31) devices have XSS in the sms_content parameter in a getSMSlist request.
TI-2017-10387 CVE-2017-14267 · GHSA-rv3h-hx86-96vc
EE 4GEE WiFi MBB (before EE60_00_05.00_31) devices have CSRF, related to…
Priority LOW 39
EE 4GEE WiFi MBB (before EE60_00_05.00_31) devices have CSRF, related to goform/AddNewProfile, goform/setWanDisconnect, goform/setSMSAutoRedirectSetting, goform/setReset, and goform/uploadBackupSettings.