Axesstel Mu553s Firmware
3 CVEs affecting Axesstel Mu553s Firmware. Latest disclosed: 2017-09-13. Critical: 1, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-11351 | Critical | 9.8 | 2017-09-13 | Axesstel MU553S MU55XS-V1.14 devices have a default password of admin for the admin account. |
CVE-2017-11350 | High | 8.8 | 2017-09-13 | Cross-Site Request Forgery (CSRF) exists in cgi-bin/ConfigSet on Axesstel MU553S MU55XS-V1.14 devices. |
CVE-2017-13724 | Medium | 5.4 | 2017-09-13 | On the Axesstel MU553S MU55XS-V1.14, there is a Stored Cross Site Scripting vulnerability in the APN parameter under the "Basic Settings" page. |