Comtrend
4 CVEs across 11 Comtrend products. Browse Comtrend vulnerabilities, severities, and proof-of-concept exploits.
Comtrend products with known CVEs
Comtrend CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2019-25483 | High | 8.4 | 2026-03-11 | Comtrend AR-5310 GE31-412SSG-C01_R10.A2pG039u.d24k contains a restricted shell escape vulnerability that allows local users to bypass command restrictions by u… |
CVE-2024-5786 | Medium | 6.5 | 2024-06-10 | Cross-Site Request Forgery vulnerability in Comtrend router WLD71-T1_v2.0.201820, affecting the GRG-4280us version. This vulnerability allows an attacker to fo… |
CVE-2024-5785 | High | 8.0 | 2024-06-10 | Command injection vulnerability in Comtrend router WLD71-T1_v2.0.201820, affecting the GRG-4280us version. This vulnerability could allow an authenticated user… |
CVE-2018-8062 | Medium | 5.4 | 2020-10-23 | A cross-site scripting (XSS) vulnerability on Comtrend AR-5387un devices with A731-410JAZ-C04_R02.A2pD035g.d23i firmware allows remote attackers to inject arbi… |
CVE-2020-10173 | High | 8.8 | 2020-03-05 | Comtrend VR-3033 DE11-416SSG-C01_R02.A2pvI042j1.d26m devices have Multiple Authenticated Command Injection vulnerabilities via the ping and traceroute diagnost… |
CVE-2018-20388 | Critical | 9.8 | 2018-12-23 | Comtrend CM-6200un 123.447.007 and CM-6300n 123.553mp1.005 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and is… |
CVE-2010-0470 | | | 2010-02-02 | Cross-site scripting (XSS) vulnerability in scvrtsrv.cmd in Comtrend CT-507IT ADSL Router allows remote attackers to inject arbitrary web script or HTML via th… |