Gxv3504

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2013-3963 Oct 01, 19:55 MEDIUM POC This Month

Cross-site request forgery (CSRF) vulnerability in goform/usermanage in Grandstream GXV3501, GXV3504, GXV3601, GXV3601HD/LL, GXV3611HD/LL, GXV3615W/P, GXV3651FHD, GXV3662HD, GXV3615WP_HD, GXV3500,. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable. Public exploit code available and no vendor patch available.

CSRF Gxv Device Firmware Gxv3500 Gxv3501 Gxv3504 +8

NVD Exploit-DB

CVSS 2.0

6.8

EPSS

0.4%

CVE-2013-3962 Oct 01, 19:55 MEDIUM This Month

Cross-site scripting (XSS) vulnerability in Grandstream GXV3501, GXV3504, GXV3601, GXV3601HD/LL, GXV3611HD/LL, GXV3615W/P, GXV3651FHD, GXV3662HD, GXV3615WP_HD, GXV3500, and possibly other camera. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.

XSS Gxv Device Firmware Gxv3500 Gxv3501 Gxv3504 +8

NVD

CVSS 2.0

4.3

EPSS

0.2%

CVE-2013-3963

EPSS 0% CVSS 6.8

MEDIUM POC This Month

CSRF Gxv Device Firmware Gxv3500 +10

NVD Exploit-DB

CVE-2013-3962

EPSS 0% CVSS 4.3

MEDIUM This Month

XSS Gxv Device Firmware Gxv3500 +10

NVD