Hathway

26 CVEs across 3 Hathway products. Browse Hathway vulnerabilities, severities, and proof-of-concept exploits.

Hathway products with known CVEs

ProductCVEs
Skyworth Router Cm510025
Skyworth Cm5100-5111
Skyworth Cm5100-511 Firmware1
Hathway CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2024-44815Medium4.62024-09-10Vulnerability in Hathway Skyworth Router CM5100 v.4.1.1.24 allows a physically proximate attacker to obtain user credentials via SPI flash Firmware W25Q64JV.
CVE-2023-51743Medium6.52024-01-17This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the Set Upstream Channel ID (UC…
CVE-2023-51742Medium6.52024-01-17This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the Add Downstream Frequency pa…
CVE-2023-51741High7.52024-01-17This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to transmission of authentication credentials in plaintext over the network. A remote…
CVE-2023-51740High7.52024-01-17This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to transmission of authentication credentials in plaintext over the network. A remote…
CVE-2023-51739Medium6.92024-01-17This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the Device Name parameter at it…
CVE-2023-51738Medium6.92024-01-17This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the Network Name (SSID) paramet…
CVE-2023-51737Medium6.92024-01-17This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the Preshared Phrase parameter…
CVE-2023-51736Medium6.92024-01-17This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the L2TP/PPTP Username paramete…
CVE-2023-51735Medium6.92024-01-17This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the Pre-shared key parameter at…
CVE-2023-51734Medium6.92024-01-17This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the Identity parameter under Re…
CVE-2023-51733Medium6.92024-01-17This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the Identity parameter under Lo…
CVE-2023-51732Medium6.92024-01-17This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the IPsec Tunnel Name parameter…
CVE-2023-51731Medium6.92024-01-17This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the Hostname parameter at its w…
CVE-2023-51730Medium6.92024-01-17This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the DDNS Password parameter at…
CVE-2023-51729Medium6.92024-01-17This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the DDNS Username parameter at…
CVE-2023-51728Medium6.92024-01-17This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the SMTP Password parameter at…
CVE-2023-51727Medium6.92024-01-17This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the SMTP Username parameter at…
CVE-2023-51726Medium6.92024-01-17This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the SMTP Server Name parameter…
CVE-2023-51725Medium6.92024-01-17This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the Contact Email Address param…
CVE-2023-51724Medium6.92024-01-17This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the URL parameter at its web in…
CVE-2023-51723Medium6.92024-01-17This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the Description parameter at it…
CVE-2023-51722Medium6.92024-01-17This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the Time Server 3 parameter at…
CVE-2023-51721Medium6.92024-01-17This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the Time Server 2 parameter at…
CVE-2023-51720Medium6.92024-01-17This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the Time Server 1 parameter at…
CVE-2023-51719Medium6.92024-01-17This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the Traceroute parameter at its…