Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2024-11980

Billion Electric router - Missing Authentication

Certain modes of routers from Billion Electric have a Missing Authentication vulnerability, allowing unauthenticated remote attackers to directly access the specific functionality to obtain partial device information, modify the WiFi SSID, and restart the device.

CVSS 3.1 · 8.6 High EPSS < 1% KEV · Not listed
Vendors
Billion Electric
Products
M120n M150 M500
CVE-2024-11981

Billion Electric router - Authentication Bypass

Certain models of routers from Billion Electric has an Authentication Bypass vulnerability, allowing unautheticated attackers to retrive contents of arbitrary web pages.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Billion Electric
Products
M100 M120n M150 and 1 more
CVE-2024-11982

Billion Electric router - Plaintext Storage of a Password

Certain models of routers from Billion Electric has a Plaintext Storage of a Password vulnerability. Remote attackers with administrator privileges can access the user settings page to retrieve plaintext passwords.

CVSS 3.1 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Billion Electric
Products
M100 M120n M150 and 1 more
CVE-2024-11983

Billion Electric router - OS Command Injection

Certain models of routers from Billion Electric has an OS Command Injection vulnerability, allowing remote attackers with administrator privileges to inject arbitrary system commands into a specific SSH function and execute them on the device.

CVSS 3.1 · 7.2 High EPSS 1.1% KEV · Not listed
Vendors
Billion Electric
Products
M100 M120n M150 and 1 more