Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

31 records

Vendor: Skyworthdigital Clear all filters
TI-2023-28382 CVE-2023-51743 · GHSA-6f66-xj9j-jjg9

Buffer Overflow vulnerability in Skyworth Router

Priority MEDIUM 40

This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the Set Upstream Channel ID (UCID) parameter at its web interface.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00581 Published 2024-01-17 No fix listed CWE-787
TI-2023-28381 CVE-2023-51742 · GHSA-q47p-3j9c-7jr3

Buffer Overflow vulnerability in Skyworth Router

Priority MEDIUM 40

This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the Add Downstream Frequency parameter at its web interface.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00581 Published 2024-01-17 No fix listed CWE-787
TI-2023-28380 CVE-2023-51741 · GHSA-qjpf-6xrp-gf44

Cleartext Submission of Password vulnerability in Skyworth Router

Priority LOW 39

This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to transmission of authentication credentials in plaintext over the network.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00372 Published 2024-01-17 No fix listed CWE-319
TI-2023-28379 CVE-2023-51740 · GHSA-7qmq-34hq-j5mx

Cleartext Submission of Password vulnerability in Skyworth Router

Priority LOW 39

This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to transmission of authentication credentials in plaintext over the network.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00372 Published 2024-01-17 No fix listed CWE-319
TI-2023-28378 CVE-2023-51739 · GHSA-r57r-jrhh-4x69

Stored Cross Site Scripting Vulnerability in Skyworth Router

Priority LOW 30

This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the Device Name parameter at its web interface.

CVSS 3.1MEDIUM 6.9 Network High privileges User interaction EPSS 0.00358 Published 2024-01-17 No fix listed CWE-79
TI-2023-28377 CVE-2023-51738 · GHSA-qphp-945f-h9m7

Stored Cross Site Scripting Vulnerability in Skyworth Router

Priority LOW 30

This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the Network Name (SSID) parameter at its web interface.

CVSS 3.1MEDIUM 6.9 Network High privileges User interaction EPSS 0.00358 Published 2024-01-17 No fix listed CWE-79
TI-2023-28376 CVE-2023-51737 · GHSA-486w-gvrc-84v6

Stored Cross Site Scripting Vulnerability in Skyworth Router

Priority LOW 30

This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the Preshared Phrase parameter at its web interface.

CVSS 3.1MEDIUM 6.9 Network High privileges User interaction EPSS 0.00358 Published 2024-01-17 No fix listed CWE-79
TI-2023-28375 CVE-2023-51736 · GHSA-4q8f-pj5f-x55c

Stored Cross Site Scripting Vulnerability in Skyworth Router

Priority LOW 30

This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the L2TP/PPTP Username parameter at its web interface.

CVSS 3.1MEDIUM 6.9 Network High privileges User interaction EPSS 0.00358 Published 2024-01-17 No fix listed CWE-79
TI-2023-28374 CVE-2023-51735 · GHSA-8495-3292-crgg

Stored Cross Site Scripting Vulnerability in Skyworth Router

Priority LOW 30

This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the Pre-shared key parameter at its web interface.

CVSS 3.1MEDIUM 6.9 Network High privileges User interaction EPSS 0.00358 Published 2024-01-17 No fix listed CWE-79
TI-2023-28373 CVE-2023-51734 · GHSA-6r8x-gvxw-7mfq

Stored Cross Site Scripting Vulnerability in Skyworth Router

Priority LOW 30

This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the Identity parameter under Remote endpoint settings at its web interface.

CVSS 3.1MEDIUM 6.9 Network High privileges User interaction EPSS 0.00358 Published 2024-01-17 No fix listed CWE-79
TI-2023-28372 CVE-2023-51733 · GHSA-qvh4-gpc4-xm9x

Stored Cross Site Scripting Vulnerability in Skyworth Router

Priority LOW 30

This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the Identity parameter under Local endpoint settings at its web interface.

CVSS 3.1MEDIUM 6.9 Network High privileges User interaction EPSS 0.00358 Published 2024-01-17 No fix listed CWE-79
TI-2023-28371 CVE-2023-51732 · GHSA-r6c5-g5wv-w8wx

Stored Cross Site Scripting Vulnerability in Skyworth Router

Priority LOW 30

This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the IPsec Tunnel Name parameter at its web interface.

CVSS 3.1MEDIUM 6.9 Network High privileges User interaction EPSS 0.00358 Published 2024-01-17 No fix listed CWE-79
TI-2023-28370 CVE-2023-51731 · GHSA-2fc2-v762-gmfr

Stored Cross Site Scripting Vulnerability in Skyworth Router

Priority LOW 30

This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the Hostname parameter at its web interface.

CVSS 3.1MEDIUM 6.9 Network High privileges User interaction EPSS 0.00358 Published 2024-01-17 No fix listed CWE-79
TI-2023-28369 CVE-2023-51730 · GHSA-4j67-9x24-qjw7

Stored Cross Site Scripting Vulnerability in Skyworth Router

Priority LOW 30

This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the DDNS Password parameter at its web interface.

CVSS 3.1MEDIUM 6.9 Network High privileges User interaction EPSS 0.00358 Published 2024-01-17 No fix listed CWE-79
TI-2023-28368 CVE-2023-51729 · GHSA-54pv-rcf3-p7vr

Stored Cross Site Scripting Vulnerability in Skyworth Router

Priority LOW 30

This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the DDNS Username parameter at its web interface.

CVSS 3.1MEDIUM 6.9 Network High privileges User interaction EPSS 0.00358 Published 2024-01-17 No fix listed CWE-79
TI-2023-28367 CVE-2023-51728 · GHSA-wc83-fp2q-r52p

Stored Cross Site Scripting Vulnerability in Skyworth Router

Priority LOW 30

This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the SMTP Password parameter at its web interface.

CVSS 3.1MEDIUM 6.9 Network High privileges User interaction EPSS 0.00358 Published 2024-01-17 No fix listed CWE-79
TI-2023-28366 CVE-2023-51727 · GHSA-q9qm-6pf8-r7mm

Stored Cross Site Scripting Vulnerability in Skyworth Router

Priority LOW 30

This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the SMTP Username parameter at its web interface.

CVSS 3.1MEDIUM 6.9 Network High privileges User interaction EPSS 0.00358 Published 2024-01-17 No fix listed CWE-79
TI-2023-28365 CVE-2023-51726 · GHSA-588j-j83f-cmh7

Stored Cross Site Scripting Vulnerability in Skyworth Router

Priority LOW 30

This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the SMTP Server Name parameter at its web interface.

CVSS 3.1MEDIUM 6.9 Network High privileges User interaction EPSS 0.00358 Published 2024-01-17 No fix listed CWE-79
TI-2023-28364 CVE-2023-51725 · GHSA-wwmg-32cv-jw5j

Stored Cross Site Scripting Vulnerability in Skyworth Router

Priority LOW 30

This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the Contact Email Address parameter at its web interface.

CVSS 3.1MEDIUM 6.9 Network High privileges User interaction EPSS 0.00358 Published 2024-01-17 No fix listed CWE-79
TI-2023-28363 CVE-2023-51724 · GHSA-5qc9-fpq2-q643

Stored Cross Site Scripting Vulnerability in Skyworth Router

Priority LOW 30

This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the URL parameter at its web interface.

CVSS 3.1MEDIUM 6.9 Network High privileges User interaction EPSS 0.00358 Published 2024-01-17 No fix listed CWE-79
TI-2023-28362 CVE-2023-51723 · GHSA-gcrv-p564-68qm

Stored Cross Site Scripting Vulnerability in Skyworth Router

Priority LOW 30

This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the Description parameter at its web interface.

CVSS 3.1MEDIUM 6.9 Network High privileges User interaction EPSS 0.00358 Published 2024-01-17 No fix listed CWE-79
TI-2023-28361 CVE-2023-51722 · GHSA-2hv2-4qf7-p9g4

Stored Cross Site Scripting Vulnerability in Skyworth Router

Priority LOW 30

This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the Time Server 3 parameter at its web interface.

CVSS 3.1MEDIUM 6.9 Network High privileges User interaction EPSS 0.00358 Published 2024-01-17 No fix listed CWE-79
TI-2023-28360 CVE-2023-51721 · GHSA-96f9-wjw8-f7j4

Stored Cross Site Scripting Vulnerability in Skyworth Router

Priority LOW 30

This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the Time Server 2 parameter at its web interface.

CVSS 3.1MEDIUM 6.9 Network High privileges User interaction EPSS 0.00358 Published 2024-01-17 No fix listed CWE-79
TI-2023-28359 CVE-2023-51720 · GHSA-j548-j2hv-85jg

Stored Cross Site Scripting Vulnerability in Skyworth Router

Priority LOW 30

This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the Time Server 1 parameter at its web interface.

CVSS 3.1MEDIUM 6.9 Network High privileges User interaction EPSS 0.00358 Published 2024-01-17 No fix listed CWE-79
TI-2023-28358 CVE-2023-51719 · GHSA-f6q2-w2qh-v5fp

Stored Cross Site Scripting Vulnerability in Skyworth Router

Priority LOW 30

This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the Traceroute parameter at its web interface.

CVSS 3.1MEDIUM 6.9 Network High privileges User interaction EPSS 0.00358 Published 2024-01-17 No fix listed CWE-79
Load more