Beeline Smart Box Firmware
3 CVEs affecting Beeline Smart Box Firmware. Latest disclosed: 2021-11-10. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-41426 | High | 8.8 | 2021-11-10 | Beeline Smart box 2.0.38 is vulnerable to Cross Site Request Forgery (CSRF) via mgt_end_user.htm. |
CVE-2020-12246 | High | 8.8 | 2020-04-29 | Beeline Smart Box 2.0.38 routers allow "Advanced settings > Other > Diagnostics" OS command injection via the Ping ping_ipaddr parameter, the Nslookup nslookup… |
CVE-2021-41427 | Medium | 6.1 | 2021-11-10 | Beeline Smart Box 2.0.38 is vulnerable to Cross Site Scripting (XSS) via the choose_mac parameter to setup.cgi. |