Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Vendor: Hot Clear all filters
TI-2013-04528 CVE-2013-5218 · GHSA-xvw8-w3w2-qpgq

Cross-site scripting (XSS) vulnerability on the HOT HOTBOX router with software 2.1.11…

Priority LOW 21

Cross-site scripting (XSS) vulnerability on the HOT HOTBOX router with software 2.1.11 allows remote attackers to inject arbitrary web script or HTML via a crafted DHCP Host Name option, which is not properly handled dur…

CVSS 2.0LOW 2.9 Adjacent network No auth Interaction — EPSS 0.03758 Published 2013-12-30 No fix listed CWE-79
TI-2013-04408 CVE-2013-5039 · GHSA-wmgq-vxwf-mfpv

Cross-site request forgery (CSRF) vulnerability in goform/wlanBasicSecurity on the HOT…

Priority LOW 29

Cross-site request forgery (CSRF) vulnerability in goform/wlanBasicSecurity on the HOT HOTBOX router with software 2.1.11 allows remote attackers to hijack the authentication of administrators for requests that change th…

CVSS 2.0MEDIUM 5.4 Adjacent network No auth Interaction — EPSS 0.02131 Published 2013-12-30 No fix listed CWE-352
TI-2013-04407 CVE-2013-5038 · GHSA-vhvm-cphw-82hj

The HOT HOTBOX router with software 2.1.11 allows remote attackers to bypass…

Priority LOW 32

The HOT HOTBOX router with software 2.1.11 allows remote attackers to bypass authentication by configuring a source IP address that had previously been used for an authenticated session.

CVSS 2.0MEDIUM 5.8 Adjacent network No auth Interaction — EPSS 0.03279 Published 2013-12-30 No fix listed CWE-287