Skip to main content

Hdmi Dongle Firmware

2 CVEs product

Monthly

CVE-2017-15304 CRITICAL Act Now

/bin/login.php in the Web Panel on the Airtame HDMI dongle with firmware before 3.0 allows an attacker to set his own session id via a "Cookie: PHPSESSID=" header. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Session Fixation PHP Information Disclosure Hdmi Dongle Firmware
NVD
CVSS 3.0
9.8
EPSS
0.3%
CVE-2017-7450 CRITICAL Act Now

AIRTAME HDMI dongle with firmware before 2.2.0 allows unauthenticated access to a big part of the management interface. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Hdmi Dongle Firmware
NVD
CVSS 3.0
9.8
EPSS
0.3%
EPSS 0% CVSS 9.8
CRITICAL Act Now

/bin/login.php in the Web Panel on the Airtame HDMI dongle with firmware before 3.0 allows an attacker to set his own session id via a "Cookie: PHPSESSID=" header. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Session Fixation PHP Information Disclosure +1
NVD
EPSS 0% CVSS 9.8
CRITICAL Act Now

AIRTAME HDMI dongle with firmware before 2.2.0 allows unauthenticated access to a big part of the management interface. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Hdmi Dongle Firmware
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy