Login Request a demo
PF
Product
Prc2402m Firmware
by Prolink · last CVE Aug 6, 2021
4
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities4In the news0Timeline
Severity mix
Critical 3High 1Medium 0Low 0
Severity
All severities4Critical3High1Medium0Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Prc2402m Firmware to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-36707
9.8
3%
Aug 6
In ProLink PRC2402M V1.0.18 and older, the set_ledonoff function in the adm.cgi binary, accessible with a page parameter value of ledonoff contains a trivial command injection…
Affected: through 1.0.18
CVE-2021-36706
9.8
3%
Aug 6
In ProLink PRC2402M V1.0.18 and older, the set_sys_cmd function in the adm.cgi binary, accessible with a page parameter value of sysCMD contains a trivial command injection where…
Affected: through 1.0.18
CVE-2021-36705
9.8
3%
Aug 6
In ProLink PRC2402M V1.0.18 and older, the set_TR069 function in the adm.cgi binary, accessible with a page parameter value of TR069 contains a trivial command injection where the…
Affected: through 1.0.18
CVE-2021-36708
7.5
1%
Aug 6
In ProLink PRC2402M V1.0.18 and older, the set_sys_init function in the login.cgi binary allows an attacker to reset the password to the administrative interface of the router
Affected: through 1.0.18
Showing 4