CVE-2016-15056

The CVE affects Ubee EVW3226 cable modem/router firmware up to 1.0.20. A configuration backup file (Configuration_file.cfg) is stored in the web root after generation and remains accessible without authentication until the next reboot, enabling a local-network attacker to retrieve the backup arch...

CVE-2024-28092

UBEE DDW365 XCNDDW365 8.14.3105 software on hardware 3.13.1 allows a remote attacker within Wi-Fi proximity to conduct stored XSS attacks via RgFirewallEL.asp, RgDdns.asp, RgTime.asp, RgDiagnostics.asp, or RgParentalBasic.asp. The affected fields are SMTP Server Name, SMTP Username, Host Name, Ti...

PT-2024-22260 · Ubee · Ubee Ddw365

Name of the Vulnerable Software and Affected Versions: UBEE DDW365 XCNDDW365 version 8.14.3105 on hardware 3.13.1 Description: The issue allows a remote attacker within Wi-Fi proximity to conduct stored XSS attacks via several ASP pages, including RgFirewallEL.asp, RgDdns.asp, RgTime.asp,...