Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

12 records

Priority LOW 29

A vulnerability in OPTILINK OP-XT71000N Hardware Version: V2.2, Firmware Version: OP_V3.3.1-191028 allows an unauthenticated, remote attacker to conduct a cross site request forgery (CSRF) attack to enable syslog mode th…

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00473 Published 2022-11-23 No fix listed CWE-352
Priority LOW 39

A vulnerability in OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OP_V3.3.1-191028 allows an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack to Reset ONU to Factory…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0058 Published 2022-11-23 No fix listed CWE-352
Priority MEDIUM 44

A vulnerability in OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OP_V3.3.1-191028 allows an attacker to upload arbitrary files through " /mgm_dev_upgrade.asp " which can "delete every file for Denial of…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01184 Published 2022-11-23 No fix listed CWE-434
Priority LOW 29

A vulnerability in Optilink OP-XT71000N Hardware version: V2.2 , Firmware Version: OP_V3.3.1-191028 allows an unauthenticated remote attacker to conduct a cross-site request forgery (CSRF) attack to change the Password f…

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00466 Published 2022-11-23 No fix listed CWE-352
Priority LOW 29

A vulnerability in OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OP_V3.3.1-191028 allows an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack to cause a Denial of Se…

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00489 Published 2022-11-23 No fix listed CWE-352
Priority LOW 20

A vulnerability in OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OP_V3.3.1-191028 allows an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack to "Enable or Disable P…

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00409 Published 2022-11-23 No fix listed CWE-352
Priority LOW 15

A vulnerability found in the OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OP_V3.3.1-191028 allows an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack to men in the…

CVSS 3.1LOW 3.1 Network No auth User interaction EPSS 0.00339 Published 2022-11-23 No fix listed CWE-352
Priority LOW 20

A vulnerability found in OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OP_V3.3.1-191028 allows an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack to Add Network Tr…

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00381 Published 2022-11-23 No fix listed CWE-352
Priority HIGH 77

Unauthenticated remote code execution in OPTILINK OP-XT71000N, Hardware Version: V2.2 occurs when the attacker passes arbitrary commands with IP-ADDRESS using " | " to execute commands on " /diag_tracert_admin.asp " in t…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.41443 Published 2022-11-23 No fix listed CWE-77