EUVD-2018-4055

Malware in sbrugna...

Eminent EM4544 Cross-Site Scripting Vulnerability

The Eminent EM4544 is a wireless router product from the Dutch company Eminent. A security vulnerability exists in the Eminent EM4544 version 9.10, which originates from the program failing to request the user's current password when setting a new password. An attacker can exploit the vulnerabili...

CVE-2018-12073

An issue was discovered on Eminent EM4544 9.10 devices. The device does not require the user's current password to set a new one within the web interface. Therefore, it is possible to exploit this issue e.g., in combination with a successful XSS, or at an unattended workstation to change the admi...

Design/Logic Flaw

An issue was discovered on Eminent EM4544 9.10 devices. The device does not require the user's current password to set a new one within the web interface. Therefore, it is possible to exploit this issue e.g., in combination with a successful XSS, or at an unattended workstation to change the admi...

CVE-2018-12073

An issue was discovered on Eminent EM4544 9.10 devices. The device does not require the user's current password to set a new one within the web interface. Therefore, it is possible to exploit this issue e.g., in combination with a successful XSS, or at an unattended workstation to change the admi...