PT-2024-14262 · Skyworth · Skyworth Router Cm5100

Name of the Vulnerable Software and Affected Versions: Skyworth Router CM5100 version 4.1.1.24 Description: This issue is due to insufficient validation of user-supplied input for the Description parameter at the web interface. A remote attacker could exploit this by supplying specially crafted...

PT-2024-14274

Name of the Vulnerable Software and Affected Versions Skyworth Router CM5100 version 4.1.1.24 Description This issue exists due to insufficient validation of user-supplied input for the Pre-shared key parameter at the web interface. A remote attacker could exploit this by supplying specially...

PT-2024-14276 · Skyworth · Skyworth Router Cm5100

Name of the Vulnerable Software and Affected Versions: Skyworth Router CM5100 version 4.1.1.24 Description: The issue exists due to insufficient validation of user-supplied input for the Preshared Phrase parameter at the web interface. A remote attacker could exploit this by supplying specially...

CVE-2018-20398

Skyworth CM5100 V1.1.0, CM5100-440 V1.2.1, CM5100-511 4.1.0.14, CM5100-GHD00 V1.2.2, and CM5100.g2 4.1.0.17 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests...

CVE-2018-20398

Skyworth CM5100 V1.1.0, CM5100-440 V1.2.1, CM5100-511 4.1.0.14, CM5100-GHD00 V1.2.2, and CM5100.g2 4.1.0.17 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests...

Code injection

Skyworth CM5100 V1.1.0, CM5100-440 V1.2.1, CM5100-511 4.1.0.14, CM5100-GHD00 V1.2.2, and CM5100.g2 4.1.0.17 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests...

CVE-2018-20398

CVE-2018-20398 affects Skyworth CM5100 family devices (V1.1.0, V1.2.1, 4.1.0.14, V1.2.2, 4.1.0.17) where remote SNMP requests to OIDs iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 can disclose credentials. The connected Red Hat advisory and other security listings corr...

PT-2018-15351

Name of the Vulnerable Software and Affected Versions Skyworth CM5100 version 1.1.0 Skyworth CM5100-440 version 1.2.1 Skyworth CM5100-511 version 4.1.0.14 Skyworth CM5100-GHD00 version 1.2.2 Skyworth CM5100.g2 version 4.1.0.17 Description The issue allows remote attackers to discover credentials...

CVE-2018-20398: Insufficiently Protected Credentials

Skyworth CM5100 V1.1.0, CM5100-440 V1.2.1, CM5100-511 4.1.0.14, CM5100-GHD00 V1.2.2, and CM5100.g2 4.1.0.17 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests...