Binardat 10g08-0800gsm_firmware

9 CVEs affecting Binardat 10g08-0800gsm_firmware. Latest disclosed: 2026-02-24. Critical: 2, High: 5.

Top CVEs affecting Binardat 10g08-0800gsm_firmware
CVESeverityScorePublishedSummary
CVE-2026-27507Critical9.82026-02-24Binardat 10G08-0800GSM network switch firmware version V300SP10260209 and prior contain hard-coded administrative credentials that cannot be changed by users…
CVE-2026-27515Critical9.12026-02-24Binardat 10G08-0800GSM network switch firmware versions prior to V300SP10260209 generate predictable numeric session identifiers in the web management interfac…
CVE-2026-23678High8.82026-02-24Binardat 10G08-0800GSM network switch firmware version V300SP10260209 and prior contain a command injection vulnerability in the traceroute diagnostic function…
CVE-2026-27521High7.52026-02-24Binardat 10G08-0800GSM network switch firmware version V300SP10260209 and prior do not implement rate limiting or account lockout on failed login attempts, ena…
CVE-2026-27520High7.52026-02-24Binardat 10G08-0800GSM network switch firmware versions prior to V300SP10260209 store a user password in a client-side cookie as a Base64-encoded value accessi…
CVE-2026-27519High7.52026-02-24Binardat 10G08-0800GSM network switch firmware version V300SP10260209 and prior use RC4 with a hard-coded key embedded in client-side JavaScript. Because the k…
CVE-2026-27516High7.52026-02-24Binardat 10G08-0800GSM network switch firmware version V300SP10260209 and prior expose user passwords in plaintext within the administrative interface and HTTP…
CVE-2026-27517Medium6.12026-02-24Binardat 10G08-0800GSM network switch firmware version V300SP10260209 and prior reflect unsanitized user input in the web interface, allowing an attacker to in…
CVE-2026-27518Medium4.32026-02-24Binardat 10G08-0800GSM network switch firmware version V300SP10260209 and prior lack CSRF protections for state-changing actions in the administrative interfac…