Vulnerabilities

TI-2020-06509 CVE-2020-8087 · GHSA-2rhc-f5j3-jr26

SMC Networks D3G0804W D3GNV5M-3.5.1.6.10_GA devices allow remote command execution by…

MEDIUM 51

SMC Networks D3G0804W D3GNV5M-3.5.1.6.10_GA devices allow remote command execution by leveraging access to the Network Diagnostic Tools screen, as demonstrated by an admin login.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.06347 Published 2020-01-27 No fix listed CWE-20

TI-2020-05856 CVE-2020-7249 · GHSA-x8xw-3cm4-77vj

SMC D3G0804W 3.5.2.5-LAT_GA devices allow XSS via the SSID field on the WiFi Network…

LOW 23

SMC D3G0804W 3.5.2.5-LAT_GA devices allow XSS via the SSID field on the WiFi Network Configuration page (after a successful login to the admin account).

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00642 Published 2020-01-21 No fix listed CWE-79

TI-2012-02581 CVE-2012-2974 · GHSA-44hm-px5x-jx2q

The web interface on the SMC SMC8024L2 switch allows remote attackers to bypass…

MEDIUM 48

The web interface on the SMC SMC8024L2 switch allows remote attackers to bypass authentication and obtain administrative access via a direct request to a .html file under (1) status/, (2) system/, (3) ports/, (4) trunks/…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.02624 Published 2012-07-19 No fix listed CWE-287

Vulnerabilities

Filters

SMC Networks D3G0804W D3GNV5M-3.5.1.6.10_GA devices allow remote command execution by…

SMC D3G0804W 3.5.2.5-LAT_GA devices allow XSS via the SSID field on the WiFi Network…

The web interface on the SMC SMC8024L2 switch allows remote attackers to bypass…