Export limit exceeded: 425825 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2023-43478

Unauthenticated configuration restore and firmware update

fake_upload.cgi on the Telstra Smart Modem Gen 2 (Arcadyan LH1000), firmware versions < 0.18.15r, allows unauthenticated attackers to upload firmware images and configuration backups, which could allow them to alter the firmware or the configuration on the device, ultimately leading to code execution as root. 

CVSS 3.1 · 8.8 High EPSS 18.0% KEV · Not listed
Vendors
Telstra
Products
Arcadyan Lh1000 Arcadyan Lh1000 Firmware
CVE-2023-43477

Post-Auth Command Injection in Telstra Smart Modem Gen 2 (Arcadyan LH1000)

The ping_from parameter of ping_tracerte.cgi in the web UI of Telstra Smart Modem Gen 2 (Arcadyan LH1000), firmware versions < 0.18.15r, was not properly sanitized before being used in a system call, which could allow an authenticated attacker to achieve command injection as root on the device. 

CVSS 3.1 · 6.8 Medium EPSS 17.7% KEV · Not listed
Vendors
Telstra
Products
Arcadyan Lh1000 Arcadyan Lh1000 Firmware