Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: Telstra Clear all filters
TI-2025-34697 CVE-2025-54992

OpenKilda XXE in SAML configuration

Priority LOW 31

OpenKilda is an open-source OpenFlow controller.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00449 Published 2025-08-11 Fixed in 1.164.0 CWE-611
TI-2025-00591 CVE-2025-0697 · GHSA-rpcx-p9vc-6cq7

Telstra Smart Modem Gen 2 HTTP Header injection

Priority HIGH 70

A vulnerability, which was classified as problematic, was found in Telstra Smart Modem Gen 2 up to 20250115.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00486 Published 2025-01-24 No fix listed CWE-707
TI-2023-23239 CVE-2023-43478 · GHSA-x2v2-mj6c-wfp3

Unauthenticated configuration restore and firmware update

Priority HIGH 76

fake_upload.cgi on the Telstra Smart Modem Gen 2 (Arcadyan LH1000), firmware versions < 0.18.15r, allows unauthenticated attackers to upload firmware images and configuration backups, which could allow them to alter the…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.17954 Published 2023-09-20 Fixed in 0.18.15r CWE-434
TI-2023-23238 CVE-2023-43477 · GHSA-87jp-gf78-6p6w

Post-Auth Command Injection in Telstra Smart Modem Gen 2 (Arcadyan LH1000)

Priority HIGH 73

The ping_from parameter of ping_tracerte.cgi in the web UI of Telstra Smart Modem Gen 2 (Arcadyan LH1000), firmware versions < 0.18.15r, was not properly sanitized before being used in a system call, which could allow an…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.17674 Published 2023-09-20 Fixed in 0.18.15r CWE-77