Axesstel

11 CVEs across 4 Axesstel products. Browse Axesstel vulnerabilities, severities, and proof-of-concept exploits.

Axesstel products with known CVEs

ProductCVEs
Mv 410r7
Mu553s3
Mu553s Firmware3
Akw-D8001
Axesstel CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2017-13724Medium5.42017-09-13On the Axesstel MU553S MU55XS-V1.14, there is a Stored Cross Site Scripting vulnerability in the APN parameter under the "Basic Settings" page.
CVE-2017-11351Critical9.82017-09-13Axesstel MU553S MU55XS-V1.14 devices have a default password of admin for the admin account.
CVE-2017-11350High8.82017-09-13Cross-Site Request Forgery (CSRF) exists in cgi-bin/ConfigSet on Axesstel MU553S MU55XS-V1.14 devices.
CVE-2009-23232009-07-05The web interface on the Axesstel MV 410R redirects users back to the referring page after execution of some CGI scripts, which makes it easier for remote atta…
CVE-2009-23222009-07-05Cross-site scripting (XSS) vulnerability in cgi-bin/sysconf.cgi on the Axesstel MV 410R allows remote attackers to inject arbitrary web script or HTML via unsp…
CVE-2009-23212009-07-05cgi-bin/sysconf.cgi on the Axesstel MV 410R allows remote attackers to cause a denial of service (configuration reset) via a RESTORE=RESTORE query string.
CVE-2009-23202009-07-05The web interface on the Axesstel MV 410R relies on client-side JavaScript code to validate input, which allows remote attackers to send crafted data, and poss…
CVE-2009-23192009-07-05The default configuration of the Wi-Fi component on the Axesstel MV 410R does not use encryption, which makes it easier for remote attackers to obtain sensitiv…
CVE-2009-23182009-07-05The Axesstel MV 410R allows remote attackers to cause a denial of service via a flood of SYN packets, a related issue to CVE-1999-0116.
CVE-2009-23172009-07-05The Axesstel MV 410R has a certain default administrator password, and does not force a password change, which makes it easier for remote attackers to obtain a…
CVE-2008-34112008-07-31The Axesstel AXW-D800 modem with D2_ETH_109_01_VEBR Jun-14-2006 software does not require authentication for (1) etc/config/System.html, (2) etc/config/Network…