Skip to main content

Indionetworks

5 CVEs vendor

Monthly

CVE-2020-21884 Apr 09, 13:15 HIGH POC This Week

Unibox SMB 2.4 and UniBox Enterprise Series 2.4 and UniBox Campus Series 2.4 contain a cross-site request forgery (CSRF) vulnerability in /tools/network-trace, /list_users,. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

CSRF Unibox U50 Firmware Unibox U500 Firmware Unibox U1000 Firmware Unibox U2500 Firmware +2
NVD VulDB
CVSS 3.1
8.8
EPSS
1.2%
CVE-2020-21883 Apr 09, 13:15 HIGH POC This Week

Unibox U-50 2.4 and UniBox Enterprise Series 2.4 and UniBox Campus Series 2.4 contain a OS command injection vulnerability in /tools/ping, which can leads to complete device takeover. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Command Injection Unibox U50 Firmware Unibox U500 Firmware Unibox U1000 Firmware Unibox U2500 Firmware +2
NVD VulDB
CVSS 3.1
8.8
EPSS
5.9%
CVE-2019-3497 Mar 21, 16:01 HIGH POC This Week

An issue was discovered on Wifi-soft UniBox controller 0.x through 2.x devices. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Authentication Bypass Unibox Firmware Indionetworks
NVD
CVSS 3.1
8.8
EPSS
9.4%
CVE-2019-3496 Mar 21, 16:01 HIGH POC This Week

An issue was discovered on Wifi-soft UniBox controller 3.x devices. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Authentication Bypass Unibox Firmware Indionetworks
NVD
CVSS 3.1
8.8
EPSS
9.4%
CVE-2019-3495 Mar 21, 16:01 HIGH POC This Week

An issue was discovered on Wifi-soft UniBox controller 0.x through 2.x devices. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP File Upload Unibox Firmware Indionetworks
NVD
CVSS 3.1
8.8
EPSS
4.9%
EPSS 1% CVSS 8.8
HIGH POC This Week

Unibox SMB 2.4 and UniBox Enterprise Series 2.4 and UniBox Campus Series 2.4 contain a cross-site request forgery (CSRF) vulnerability in /tools/network-trace, /list_users,. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

CSRF Unibox U50 Firmware Unibox U500 Firmware +4
NVD VulDB
EPSS 6% CVSS 8.8
HIGH POC This Week

Unibox U-50 2.4 and UniBox Enterprise Series 2.4 and UniBox Campus Series 2.4 contain a OS command injection vulnerability in /tools/ping, which can leads to complete device takeover. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Command Injection Unibox U50 Firmware Unibox U500 Firmware +4
NVD VulDB
EPSS 9% CVSS 8.8
HIGH POC This Week

An issue was discovered on Wifi-soft UniBox controller 0.x through 2.x devices. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Authentication Bypass Unibox Firmware Indionetworks
NVD
EPSS 9% CVSS 8.8
HIGH POC This Week

An issue was discovered on Wifi-soft UniBox controller 3.x devices. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Authentication Bypass Unibox Firmware Indionetworks
NVD
EPSS 5% CVSS 8.8
HIGH POC This Week

An issue was discovered on Wifi-soft UniBox controller 0.x through 2.x devices. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP File Upload Unibox Firmware +1
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy