Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Vendor: ProSoft Technology Clear all filters
TI-2017-14300 CVE-2017-20236 · GHSA-2v53-p8wg-cgj7

ProSoft Technology ICX35-HWC Command Injection via Web Interface

Priority MEDIUM 49

ProSoft Technology ICX35-HWC versions 1.3 and prior cellular gateways contain an input validation vulnerability in the web user interface that allows remote attackers to inject and execute system commands by submitting m…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00695 Published 2026-04-03 No fix listed CWE-78
TI-2017-14299 CVE-2017-20235 · GHSA-6826-cff7-fh67

ProSoft Technology ICX35-HWC Authentication Bypass

Priority MEDIUM 48

ProSoft Technology ICX35-HWC version 1.3 and prior cellular gateways contain an authentication bypass vulnerability in the web user interface that allows unauthenticated attackers to gain access to administrative functio…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00459 Published 2026-04-03 No fix listed CWE-287
TI-2021-05554 CVE-2021-22661 · GHSA-cm5g-7gvh-66wv

Access control flaw in ICX35-HWC-A, ICX35-HWC-E

Priority LOW 36

Changing the password on the module webpage does not require the user to type in the current password first.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.018 Published 2021-02-26 No fix listed CWE-264