Export limit exceeded: 425863 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2019-7746

JioFi 4 jmr1140 Amtel_JMR1140_R12.07 devices allow remote attackers to obtain an admin token by making a /cgi-bin/qcmap_auth type=getuser request and then reading the token field. This token value can then be used to change the Wi-Fi password or perform a factory reset.

CVSS 3.0 · 8.1 High EPSS 1.1% KEV · Not listed
Vendors
Jio
Products
Jmr1140 Jmr1140 Firmware
CVE-2019-7745

JioFi 4 jmr1140 Amtel_JMR1140_R12.07 devices allow remote attackers to obtain the Wi-Fi password by making a cgi-bin/qcmap_web_cgi Page=GetWiFi_Setting request and then reading the wpa_security_key field.

CVSS 3.0 · 9.8 Critical EPSS 3.8% KEV · Not listed
Vendors
Jio
Products
Jmr1140 Jmr1140 Firmware
CVE-2019-7687

cgi-bin/qcmap_web_cgi on JioFi 4 jmr1140 Amtel_JMR1140_R12.07 devices has POST based reflected XSS via the Page parameter. No sanitization is performed for user input data.

CVSS 3.0 · 6.1 Medium EPSS 1.6% KEV · Not listed
Vendors
Jio
Products
Jmr1140 Jmr1140 Firmware