ag-hp-5g27 Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/ag-hp-5g27/ Sun, 26 Feb 2023 06:43:18 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png ag-hp-5g27 Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/ag-hp-5g27/ 32 32 CVE-2020-8170 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-8170/ Sun, 26 Feb 2023 06:43:18 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-8170/ We have recently released new version of AirMax AirOS firmware v6.3.0 for TI, XW and XM boards that fixes vulnerabilities found on AirMax AirOS v6.2.0 and prior TI, XW and XM boards, according to the description below:Multiple end-points with parameters vulnerable to reflected cross site scripting (XSS), allowing attackers to abuse the user’ session information […]

The post CVE-2020-8170 appeared first on CVE Vulnerability.

]]> We have recently released new version of AirMax AirOS firmware v6.3.0 for TI, XW and XM boards that fixes vulnerabilities found on AirMax AirOS v6.2.0 and prior TI, XW and XM boards, according to the description below:Multiple end-points with parameters vulnerable to reflected cross site scripting (XSS), allowing attackers to abuse the user’ session information and/or account takeover of the admin user.Mitigation:Update to the latest AirMax AirOS firmware version available at the AirMax download page.

The post CVE-2020-8170 appeared first on CVE Vulnerability.

]]> CVE-2020-8171 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-8171/ Sun, 26 Feb 2023 06:43:18 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-8171/ We have recently released new version of AirMax AirOS firmware v6.3.0 for TI, XW and XM boards that fixes vulnerabilities found on AirMax AirOS v6.2.0 and prior TI, XW and XM boards, according to the description below:There are certain end-points containing functionalities that are vulnerable to command injection. It is possible to craft an input […]

The post CVE-2020-8171 appeared first on CVE Vulnerability.

]]> We have recently released new version of AirMax AirOS firmware v6.3.0 for TI, XW and XM boards that fixes vulnerabilities found on AirMax AirOS v6.2.0 and prior TI, XW and XM boards, according to the description below:There are certain end-points containing functionalities that are vulnerable to command injection. It is possible to craft an input string that passes the filter check but still contains commands, resulting in remote code execution.Mitigation:Update to the latest AirMax AirOS firmware version available at the AirMax download page.

The post CVE-2020-8171 appeared first on CVE Vulnerability.

]]> CVE-2020-8168 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-8168/ Sun, 26 Feb 2023 06:43:17 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-8168/ We have recently released new version of AirMax AirOS firmware v6.3.0 for TI, XW and XM boards that fixes vulnerabilities found on AirMax AirOS v6.2.0 and prior TI, XW and XM boards, according to the description below:Attackers can abuse multiple end-points not protected against cross-site request forgery (CSRF), as a result authenticated users can be […]

The post CVE-2020-8168 appeared first on CVE Vulnerability.

]]> We have recently released new version of AirMax AirOS firmware v6.3.0 for TI, XW and XM boards that fixes vulnerabilities found on AirMax AirOS v6.2.0 and prior TI, XW and XM boards, according to the description below:Attackers can abuse multiple end-points not protected against cross-site request forgery (CSRF), as a result authenticated users can be persuaded to visit malicious web pages, which allows attackers to perform arbitrary actions, such as downgrade the device’s firmware to older versions, modify configuration, upload arbitrary firmware, exfiltrate files and tokens.Mitigation:Update to the latest AirMax AirOS firmware version available at the AirMax download page.

The post CVE-2020-8168 appeared first on CVE Vulnerability.

]]>