Vulnerabilities

TI-2024-28008 CVE-2024-41988 · GHSA-c6mx-ff55-jhcw

Missing Authentication for Critical Function vulnerability in TEM Opera Plus FM Family Transmitter

MEDIUM 43

TEM Opera Plus FM Family Transmitter allows access to an unprotected endpoint that allows MPFS File System binary image upload without authentication.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.0059 Published 2024-10-03 No fix listed CWE-306

TI-2024-28007 CVE-2024-41987 · GHSA-75x6-3558-67mc

Cross-Site Request Forgery (CSRF) vulnerability in TEM Opera Plus FM Family Transmitter

LOW 37

The TEM Opera Plus FM Family Transmitter application interface allows users to perform certain actions via HTTP requests without performing any validity checks to verify the requests.

CVSS 4.0HIGH 8.6 Network No auth User interaction EPSS 0.00245 Published 2024-10-03 No fix listed CWE-352

TI-2022-02393 CVE-2022-2591 · GHSA-q5rm-35r4-95hh

TEM FLEX-1085 reboot denial of service

MEDIUM 45

A vulnerability classified as critical has been found in TEM FLEX-1085 1.6.0.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.09327 Published 2022-07-31 No fix listed CWE-404

TI-2022-00972 CVE-2022-1077 · GHSA-jpjh-85f7-386r

TEM FLEX-1080/FLEX-1085 Log information disclosure

MEDIUM 44

A vulnerability was found in TEM FLEX-1080 and FLEX-1085 1.6.0.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0251 Published 2022-03-29 No fix listed CWE-200

TI-2022-00969 CVE-2022-1074 · GHSA-5j37-xpr8-f7hr

TEM FLEX-1085 injection

LOW 25

A vulnerability has been found in TEM FLEX-1085 1.6.0 and classified as problematic.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00441 Published 2022-03-29 No fix listed CWE-74