Lucene search

K

Mu553S Firmware Security Vulnerabilities - January

cve
cve

CVE-2017-11350

Cross-Site Request Forgery (CSRF) exists in cgi-bin/ConfigSet on Axesstel MU553S MU55XS-V1.14 devices.

8.8CVSS

8.7AI Score

0.001EPSS

2017-09-13 08:29 AM
38
cve
cve

CVE-2017-11351

Axesstel MU553S MU55XS-V1.14 devices have a default password of admin for the admin account.

9.8CVSS

9.5AI Score

0.002EPSS

2017-09-13 08:29 AM
25
cve
cve

CVE-2017-13724

On the Axesstel MU553S MU55XS-V1.14, there is a Stored Cross Site Scripting vulnerability in the APN parameter under the "Basic Settings" page.

5.4CVSS

5.3AI Score

0.001EPSS

2017-09-13 08:29 AM
28