Lucene search

Smart Box Firmware Security Vulnerabilities

cve

CVE-2020-12246

Beeline Smart Box 2.0.38 routers allow "Advanced settings > Other > Diagnostics" OS command injection via the Ping ping_ipaddr parameter, the Nslookup nslookup_ipaddr parameter, or the Traceroute traceroute_ipaddr parameter.

8.8CVSS

8.9AI Score

0.563EPSS

2020-04-29 01:15 PM

cve

CVE-2021-41426

Beeline Smart box 2.0.38 is vulnerable to Cross Site Request Forgery (CSRF) via mgt_end_user.htm.

8.8CVSS

8.7AI Score

0.003EPSS

2021-11-10 04:15 PM

cve

CVE-2021-41427

Beeline Smart Box 2.0.38 is vulnerable to Cross Site Scripting (XSS) via the choose_mac parameter to setup.cgi.

6.1CVSS

6AI Score

0.001EPSS

2021-11-10 04:15 PM