Apollotechnologiesinc Momentum Axel 720p
6 CVEs affecting Apollotechnologiesinc Momentum Axel 720p. Latest disclosed: 2018-06-13. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-12323 | Medium | 6.8 | 2018-06-13 | An issue was discovered on Momentum Axel 720P 5.1.8 devices. A password of EHLGVG is hard-coded for the root and admin accounts, which makes it easier for phys… |
CVE-2018-12259 | Medium | 6.8 | 2018-06-12 | An issue was discovered on Momentum Axel 720P 5.1.8 devices. Root access can be obtained via UART pins without any restrictions, which leads to full system com… |
CVE-2018-12258 | Medium | 6.8 | 2018-06-12 | An issue was discovered on Momentum Axel 720P 5.1.8 devices. Custom Firmware Upgrade is possible via an SD Card. With physical access, an attacker can upgrade… |
CVE-2018-12260 | Medium | 6.7 | 2018-06-12 | An issue was discovered on Momentum Axel 720P 5.1.8 devices. The root password can be obtained in cleartext by issuing the command 'showKey' from the root CLI… |
CVE-2018-12261 | Medium | 4.4 | 2018-06-12 | An issue was discovered on Momentum Axel 720P 5.1.8 devices. All processes run as root. |
CVE-2018-12257 | Medium | 4.4 | 2018-06-12 | An issue was discovered on Momentum Axel 720P 5.1.8 devices. There is Authenticated Custom Firmware Upgrade via DNS Hijacking. An authenticated root user with… |