Microsemi S350i Firmware
4 CVEs affecting Microsemi S350i Firmware. Latest disclosed: 2018-01-11. Critical: 1, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2014-5071 | Critical | 9.8 | 2018-01-08 | SQL injection vulnerability in the checkPassword function in Symmetricom s350i 2.70.15 allows remote attackers to execute arbitrary SQL commands via vectors in… |
CVE-2014-5070 | High | 8.8 | 2018-01-11 | Symmetricom s350i 2.70.15 allows remote authenticated users to gain privileges via vectors related to pushing unauthenticated users to the login page. |
CVE-2014-5068 | High | 7.5 | 2018-01-11 | Directory traversal vulnerability in the web application in Symmetricom s350i 2.70.15 allows remote attackers to read arbitrary files via a (1) ../ (dot dot sl… |
CVE-2014-5069 | Medium | 6.1 | 2018-01-08 | Cross-site scripting (XSS) vulnerability in Symmetricom s350i 2.70.15 allows remote attackers to inject arbitrary web script or HTML via vectors involving syst… |