Furuno Felcom 250 Firmware
3 CVEs affecting Furuno Felcom 250 Firmware. Latest disclosed: 2018-09-10. Critical: 3, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-16705 | Critical | 9.8 | 2018-09-10 | FURUNO FELCOM 250 and 500 devices allow unauthenticated access to the xml/permission.xml file containing all of the system's usernames and passwords. This incl… |
CVE-2018-16591 | Critical | 9.8 | 2018-09-10 | FURUNO FELCOM 250 and 500 devices allow unauthenticated users to change the password for the Admin, Log and Service accounts, as well as the password for the p… |
CVE-2018-16590 | Critical | 9.8 | 2018-09-06 | FURUNO FELCOM 250 and 500 devices use only client-side JavaScript in login.js for authentication. |