Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 5

Export CSV
CVE-2024-41987

Cross-Site Request Forgery (CSRF) vulnerability in TEM Opera Plus FM Family Transmitter

The TEM Opera Plus FM Family Transmitter application interface allows users to perform certain actions via HTTP requests without performing any validity checks to verify the requests. This can be exploited to perform certain actions with administrative privileges if a logged-in user visits a malicious web site.

CVSS 4.0 · 8.6 High EPSS < 1% KEV · Not listed
Vendors
Tem
Products
Opera Plus Fm Family Transmitter
CVE-2024-41988

Missing Authentication for Critical Function vulnerability in TEM Opera Plus FM Family Transmitter

TEM Opera Plus FM Family Transmitter allows access to an unprotected endpoint that allows MPFS File System binary image upload without authentication. This file system serves as the basis for the HTTP2 web server module but is also used by the SNMP module and is available to other applications that require basic read-only storage capabilities. This can be exploited to overwrite the flash program memory that holds the web server's main interfaces and execute arbitrary code.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed
Vendors
Tem
Products
Opera Plus Fm Family Transmitter
CVE-2022-1074

TEM FLEX-1085 injection

A vulnerability has been found in TEM FLEX-1085 1.6.0 and classified as problematic. Using the input <h1>HTML Injection</h1> in the WiFi settings of the dashboard leads to html injection.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Tem
Products
Flex-1085 Flex-1085 Firmware
CVE-2022-1077

TEM FLEX-1080/FLEX-1085 Log information disclosure

A vulnerability was found in TEM FLEX-1080 and FLEX-1085 1.6.0. It has been declared as problematic. This vulnerability log.cgi of the component Log Handler. A direct request leads to information disclosure of hardware information. The attack can be initiated remotely and does not require any form of authentication.

CVSS 3.1 · 5.3 Medium EPSS 2.5% KEV · Not listed
Vendors
Tem
Products
Flex-1080 Flex-1080 Firmware Flex-1085 and 1 more
CVE-2022-2591

TEM FLEX-1085 reboot denial of service

A vulnerability classified as critical has been found in TEM FLEX-1085 1.6.0. Affected is an unknown function of the file /sistema/flash/reboot. The manipulation leads to denial of service. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

CVSS 3.1 · 7.5 High EPSS 9.3% KEV · Not listed
Vendors
Tem
Products
Flex-1085 Flex-1085 Firmware