Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2024-0555

Cross-Site Request Forgery (CSRF) vulnerability on WIC1200

A Cross-Site Request Forgery (CSRF) vulnerability has been found on WIC1200, affecting version 1.1. An authenticated user could lead another user into executing unwanted actions inside the application they are logged in. This vulnerability is possible due to the lack of propper CSRF token implementation.

CVSS 3.1 · 4.6 Medium EPSS < 1% KEV · Not listed
Vendors
Xantech
Products
Wic1200 Wic1200 Firmware
CVE-2024-0554

Cross-site scripting (XSS) vulnerability on WIC1200

A Cross-site scripting (XSS) vulnerability has been found on WIC1200, affecting version 1.1. An authenticated user could store a malicious javascript payload in the device model parameter via '/setup/diags_ir_learn.asp', allowing the attacker to retrieve the session details of another user.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Xantech
Products
Wic1200 Wic1200 Firmware
CVE-2024-0556

Weak Cryptography for Passwords vulnerability on WIC1200

A Weak Cryptography for Passwords vulnerability has been detected on WIC200 affecting version 1.1. This vulnerability allows a remote user to intercept the traffic and retrieve the credentials from another user and decode it in base64 allowing the attacker to see the credentials in plain text.

CVSS 3.1 · 7.1 High EPSS < 1% KEV · Not listed
Vendors
Xantech
Products
Wic1200 Wic1200 Firmware