Vulnerabilities

TI-2018-11958 CVE-2018-16705 · GHSA-jgrg-hjm6-wj6m

FURUNO FELCOM 250 and 500 devices allow unauthenticated access to the xml/permission.xml…

MEDIUM 45

FURUNO FELCOM 250 and 500 devices allow unauthenticated access to the xml/permission.xml file containing all of the system's usernames and passwords.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01573 Published 2018-09-10 No fix listed CWE-200

TI-2018-11887 CVE-2018-16591 · GHSA-jj3p-f5rj-jw7r

FURUNO FELCOM 250 and 500 devices allow unauthenticated users to change the password for…

MEDIUM 46

FURUNO FELCOM 250 and 500 devices allow unauthenticated users to change the password for the Admin, Log and Service accounts, as well as the password for the protected "SMS" panel via /cgi-bin/sm_changepassword.cgi and /…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02162 Published 2018-09-10 No fix listed CWE-862

TI-2018-11886 CVE-2018-16590 · GHSA-wr3w-7fj6-qvcr

FURUNO FELCOM 250 and 500 devices use only client-side JavaScript in login.js for authentication.

MEDIUM 47

FURUNO FELCOM 250 and 500 devices use only client-side JavaScript in login.js for authentication.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02359 Published 2018-09-06 No fix listed CWE-287

Vulnerabilities

Filters

FURUNO FELCOM 250 and 500 devices allow unauthenticated access to the xml/permission.xml…

FURUNO FELCOM 250 and 500 devices allow unauthenticated users to change the password for…

FURUNO FELCOM 250 and 500 devices use only client-side JavaScript in login.js for authentication.