Wdr 3124A Us Firmware

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2021-39279 HIGH POC This Week

Certain MOXA devices allow Authenticated Command Injection via /forms/web_importTFTP. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Command Injection Wac 2004 Firmware Wac 1001 Firmware Wac 1001 T Firmware Oncell G3470A Lte Eu Firmware +8

NVD

CVSS 3.1

8.8

EPSS

4.6%

CVE-2021-39278 MEDIUM POC This Month

Certain MOXA devices allow reflected XSS via the Config Import menu. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

XSS Wac 2004 Firmware Wac 1001 Firmware Wac 1001 T Firmware Oncell G3470A Lte Eu Firmware +8

NVD

CVSS 3.1

6.1

EPSS

0.9%

CVE-2021-39279

EPSS 5% CVSS 8.8

HIGH POC This Week

Command Injection Wac 2004 Firmware Wac 1001 Firmware +10

NVD

CVE-2021-39278

EPSS 1% CVSS 6.1

MEDIUM POC This Month

XSS Wac 2004 Firmware Wac 1001 Firmware +10

NVD