CVE-2023-51740

CVE-2023-51740 affects Skyworth Router CM5100, version 4.1.1.24. The vulnerability arises from transmitting authentication credentials in plaintext over the network, enabling a remote attacker to eavesdrop network traffic and extract the username and password from the router’s web interface (Logi...

CVE-2023-51727

Summary: CVE-2023-51727 affects Skyworth Router CM5100 (v4.1.1.24). The issue is insufficient validation of the SMTP Username parameter on the web interface, allowing a remote attacker to submit crafted input. This could enable stored XSS on the targeted system. Affected component: Web interface ...

CVE-2023-51724

CVE-2023-51724 affects Skyworth Router CM5100, version 4.1.1.24. The root cause is insufficient validation of the URL parameter on the router’s web interface, enabling a remote attacker to deliver crafted input that can trigger a stored XSS condition. The connected documents consistently describe...