Cp300 Firmware Security Vulnerabilities and Issues — Cp300 Firmware CVE List

cve

CVE-2023-36955

TOTOLINK CP300+ <=V5.2cu.7594_B20200910 was discovered to contain a stack overflow via the File parameter in the function...

9.8CVSS

9.6AI Score

0.001EPSS

2023-10-16 06:15 AM

10

cve

CVE-2023-36954

TOTOLINK CP300+ V5.2cu.7594_B20200910 and before is vulnerable to command...

9.8CVSS

9.6AI Score

0.641EPSS

2023-10-16 06:15 AM

14

cve

CVE-2023-36953

TOTOLINK CP300+ V5.2cu.7594_B20200910 and before is vulnerable to command...

9.8CVSS

9.6AI Score

0.641EPSS

2023-10-16 06:15 AM

11

cve

CVE-2023-36952

TOTOLINK CP300+ V5.2cu.7594_B20200910 was discovered to contain a stack overflow via the pingIp parameter in the function...

9.8CVSS

9.6AI Score

0.001EPSS

2023-10-16 05:15 AM

11

cve

CVE-2023-34669

TOTOLINK CP300+ V5.2cu.7594 contains a Denial of Service vulnerability in function RebootSystem of the file lib/cste_modules/system which can reboot the...

7.5CVSS

7.5AI Score

0.001EPSS

2023-07-17 05:15 PM

12

cve

CVE-2023-31856

A command injection vulnerability in the hostTime parameter in the function NTPSyncWithHostof TOTOLINK CP300+ V5.2cu.7594_B20200910 allows attackers to execute arbitrary commands via a crafted http...

9.8CVSS

9.7AI Score

0.05EPSS

2023-05-16 03:15 PM

16

cve

CVE-2023-28766

A vulnerability has been identified in SIPROTEC 5 6MD85 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 6MD86 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 6MD89 (CP300) (All versions >= V7.80 < V9.64), SIPROTEC 5 6MU85 (CP300) (All versions >= V7.80 < V9.40), SIPR...

7.5CVSS

7.4AI Score

0.002EPSS

2023-04-11 10:15 AM

70

cve

CVE-2022-45044

A vulnerability has been identified in SIPROTEC 5 6MD84 (CP300) (All versions < V9.50), SIPROTEC 5 6MD85 (CP200) (All versions), SIPROTEC 5 6MD85 (CP300) (All versions < V9.50), SIPROTEC 5 6MD86 (CP200) (All versions), SIPROTEC 5 6MD86 (CP300) (All versions < V9.50), SIPROTEC 5 6MD89 (CP30...

5.3CVSS

5.8AI Score

0.001EPSS

2022-12-13 04:15 PM

88

cve

CVE-2021-41769

A vulnerability has been identified in SIPROTEC 5 6MD85 devices (CPU variant CP300) (All versions < V8.83), SIPROTEC 5 6MD86 devices (CPU variant CP300) (All versions < V8.83), SIPROTEC 5 6MD89 devices (CPU variant CP300) (All versions < V8.83), SIPROTEC 5 6MU85 devices (CPU variant CP300)...

7.5CVSS

7.4AI Score

0.001EPSS

2022-01-11 12:15 PM

46

cve

CVE-2019-10938

A vulnerability has been identified in SIPROTEC 5 devices with CPU variants CP200 (All versions < V7.59), SIPROTEC 5 devices with CPU variants CP300 and CP100 (All versions < V8.01), Siemens Power Meters Series 9410 (All versions < V2.2.1), Siemens Power Meters Series 9810 (All versions). ...

9.8CVSS

9.1AI Score

0.003EPSS

2019-08-02 02:15 PM

27

cve

CVE-2018-16563

A vulnerability has been identified in Firmware variant IEC 61850 for EN100 Ethernet module (All versions < V4.35), Firmware variant MODBUS TCP for EN100 Ethernet module (All versions), Firmware variant DNP3 TCP for EN100 Ethernet module (All versions), Firmware variant IEC104 for EN100 Ethernet...

5.9CVSS

5.5AI Score

0.001EPSS

2019-03-21 04:00 PM

35

cve

CVE-2018-11451

A vulnerability has been identified in Firmware variant IEC 61850 for EN100 Ethernet module (All versions < V4.33), Firmware variant PROFINET IO for EN100 Ethernet module (All versions), Firmware variant Modbus TCP for EN100 Ethernet module (All versions), Firmware variant DNP3 TCP for EN100...

7.5CVSS

7.2AI Score

0.002EPSS

2018-07-23 09:29 PM

38

cve

CVE-2018-11452

A vulnerability has been identified in Firmware variant IEC 61850 for EN100 Ethernet module (All versions < V4.33), Firmware variant PROFINET IO for EN100 Ethernet module (All versions), Firmware variant Modbus TCP for EN100 Ethernet module (All versions), Firmware variant DNP3 TCP for EN100...

7.5CVSS

7.2AI Score

0.002EPSS

2018-07-23 09:29 PM

41