169 matches found
CVE-2026-67578
FA-50 all versions miss authentication for some configuration. An attacker with access to the vessel's internal network can manipulate the product's settings screen to alter some configuration parameters...
CVE-2026-59769
FA-50 all versions contain hard-coded credentials. An attacker, who knows the credentials and has access to the vessel's internal network, can operate the settings screen using that credentials to alter the identification number...
EUVD-2026-65319
FA-50 all versions contain hard-coded credentials. An attacker, who knows the credentials and has access to the vessel's internal network, can operate the settings screen using that credentials to alter the identification number...
CVE-2026-59769
FA-50 all versions contain hard-coded credentials. An attacker, who knows the credentials and has access to the vessel's internal network, can operate the settings screen using that credentials to alter the identification number...
CVE-2026-59769
Furuno FA-50 (all versions) contains hard-coded credentials that, if known to an attacker with access to the vessel's internal network, allow operation of the settings screen to alter the identification number . The vulnerability is rated CVSS 3.1: 9.1 (CRITICAL) and CVSS 4.0: 8.8 (HIGH) , reflec...
CVE-2026-67578
FA-50 all versions miss authentication for some configuration. An attacker with access to the vessel's internal network can manipulate the product's settings screen to alter some configuration parameters...
CVE-2026-67578
The Furuno FA-50 (all versions) has a missing authentication flaw affecting certain configuration parameters. An attacker with access to the vessel's internal network can manipulate the product's settings screen to alter configuration without authentication. The CVSS 3.1 score is 7.5 (HIGH) with ...
EUVD-2026-65318
FA-50 all versions miss authentication for some configuration. An attacker with access to the vessel's internal network can manipulate the product's settings screen to alter some configuration parameters...
PT-2026-81193
Name of the Vulnerable Software and Affected Versions FA-50 affected versions not specified Description The software contains hard-coded credentials. An attacker with access to the internal network of the vessel can use these credentials to access the settings screen and alter the identification...
PT-2026-81194
FA-50 all versions miss authentication for some configuration. An attacker with access to the vessel's internal network can manipulate the product's settings screen to alter some configuration parameters...
CVE-2021-4464
FiberHome AN5506-04-FA firmware versions up to and including RP2631 and HG6245D prior to RP2602 contain a stack-based buffer overflow, as the HTTP service 'webs' fails to enforce maximum lengths for Cookie header values. When a cookie longer than 511 bytes is processed, a stack buffer is overrun,...
CVE-2021-4464
FiberHome AN5506-04-FA firmware versions up to and including RP2631 and HG6245D prior to RP2602 contain a stack-based buffer overflow, as the HTTP service 'webs' fails to enforce maximum lengths for Cookie header values. When a cookie longer than 511 bytes is processed, a stack buffer is overrun,...
CVE-2021-4464 FIberHome AN5506-04-FA / HG6245D Routers Remote Stack Overflow
FiberHome AN5506-04-FA firmware versions up to and including RP2631 and HG6245D prior to RP2602 contain a stack-based buffer overflow, as the HTTP service 'webs' fails to enforce maximum lengths for Cookie header values. When a cookie longer than 511 bytes is processed, a stack buffer is overrun,...
CVE-2021-4464 FIberHome AN5506-04-FA / HG6245D Routers Remote Stack Overflow
FiberHome AN5506-04-FA firmware versions up to and including RP2631 and HG6245D prior to RP2602 contain a stack-based buffer overflow, as the HTTP service 'webs' fails to enforce maximum lengths for Cookie header values. When a cookie longer than 511 bytes is processed, a stack buffer is overrun,...
EUVD-2025-136554
Malicious code in sahufarf-satud-fa npm...
Malicious code in sgoodaini-ngsa-fa (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1e421bae6a2c75d82d0c1eb52a80808012b62811920b06a4deba1c92d4019a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-138882
Malicious code in poglymer-ogihh-fa npm...
Malicious code in polymer-avoafifa-fa (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14cc75b3cca1381fc0a0dc7f978e8363534f399779695fecf6f4095c3537a2b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...