Multitech - vulnerabilities (CVEs)

6 CVEs in 8 products, 0 in the last 30 days, newest from 2023-07-07.

Products

CVE-2023-25201 - CVSS 8.8 (high), 2023-07-07: Cross Site Request Forgery (CSRF) vulnerability in MultiTech Conduit AP MTCAP2-L4E1 MTCAP2-L4E1-868-042A v.6.0.0 allows a remote attacker to execute arbitrary…
CVE-2020-7594 - CVSS 7.2 (high), 2020-01-21: MultiTech Conduit MTCDT-LVW2-24XX 1.4.17-ocea-13592 devices allow remote authenticated administrators to execute arbitrary OS commands by navigating to the…
CVE-2018-17562 - CVSS 7.5 (high), 2018-10-03: Multi-Tech FaxFinder before 5.1.6 has SQL Injection via a status/call_details?oid= URI, allowing an attacker to extract the underlying database schema to…
CVE-2016-10512 - CVSS 9.8 (critical), 2017-09-30: MultiTech FaxFinder before 4.1.2 stores Passwords unencrypted for maintaining the test connectivity function of its LDAP configuration. These credentials are…
CVE-2003-0126 - CVSS 7.5 (high), 2003-03-18: The web interface for SOHO Routefinder 550 firmware 4.63 and earlier, and possibly later versions, has a default "admin" account with a blank password, which…
CVE-2003-0125 - CVSS 5 (medium), 2003-03-18: Buffer overflow in the web interface for SOHO Routefinder 550 before firmware 4.63 allows remote attackers to cause a denial of service (reboot) and execute…