Orange Airbox Firmware
3 CVEs affecting Orange Airbox Firmware. Latest disclosed: 2018-10-16. Critical: 1, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-18375 | Critical | 9.8 | 2018-10-16 | goform/getProfileList in Orange AirBox Y858_FL_01.16_04 allows attackers to extract APN data (name, number, username, and password) via the rand parameter. |
CVE-2018-18377 | High | 7.5 | 2018-10-16 | goform/setReset on Orange AirBox Y858_FL_01.16_04 devices allows attackers to reset a router to factory settings, which can be used to login using the default… |
CVE-2018-18376 | High | 7.5 | 2018-10-16 | goform/getWlanClientInfo in Orange AirBox Y858_FL_01.16_04 allows remote attackers to discover information about currently connected devices (hostnames, IP add… |