Meinbwa Direx-Pro
3 CVEs affecting Meinbwa Direx-Pro. Latest disclosed: 2020-03-09. Critical: 1, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-10250 | Critical | 9.8 | 2020-03-09 | BWA DiREX-Pro 1.2181 devices allow remote attackers to execute arbitrary OS commands via shell metacharacters in the PKG parameter to uninstall.php3. |
CVE-2020-10248 | High | 7.5 | 2020-03-09 | BWA DiREX-Pro 1.2181 devices allow remote attackers to discover passwords via a direct request to val_users.php3. |
CVE-2020-10249 | Medium | 5.3 | 2020-03-09 | BWA DiREX-Pro 1.2181 devices allow full path disclosure via an invalid name array parameter to val_soft.php3. |