Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: Ignitenet Clear all filters
TI-2020-04709 CVE-2020-5781 · GHSA-r536-4rjh-7q6r

Cross-site scripting in IgniteNet HeliOS GLinq

Priority LOW 22

In IgniteNet HeliOS GLinq v2.2.1 r2961, the langSelection parameter is stored in the luci configuration file (/etc/config/luci) by the authenticator.htmlauth function.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00902 Published 2020-09-23 No fix listed CWE-79
TI-2020-04710 CVE-2020-5782 · GHSA-5f67-g4f8-r5g4

In IgniteNet HeliOS GLinq v2.2.1 r2961, if a user logs in and sets the ‘wan_type’…

Priority LOW 31

In IgniteNet HeliOS GLinq v2.2.1 r2961, if a user logs in and sets the ‘wan_type’ parameter, the wan interface for the device will become unreachable, which results in a denial of service condition for devices dependent…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00987 Published 2020-09-23 No fix listed