W1
Product
Wireless 1420 Gateway Firmware
8
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 1High 6Medium 1Low 0
Watch
Add Wireless 1420 Gateway Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-12030 | 10.0 | Sep 29 | There is a flaw in the code used to configure the internal gateway firewall when the gateway's VLAN feature is enabled Affected: 4.6.43 through 4.7.84 |
| CVE-2021-42542 | 8.8 | Oct 22 | The affected product is vulnerable to directory traversal due to mishandling of provided backup folder structure Affected: before 4.7.94 |
| CVE-2021-42540 | 8.8 | Oct 22 | The affected product is vulnerable to a unsanitized extract folder for system configuration Affected: before 4.7.94 |
| CVE-2021-42539 | 8.8 | Oct 22 | The affected product is vulnerable to a missing permission validation on system backup restore, which could lead to account take over and unapproved settings change Affected: before 4.7.94 |
| CVE-2021-42538 | 8.8 | Oct 22 | The affected product is vulnerable to a parameter injection via passphrase, which enables the attacker to supply uncontrolled input Affected: before 4.7.94 |
| CVE-2021-38485 | 8.8 | Oct 22 | The affected product is vulnerable to improper input validation in the restore file Affected: before 4.7.94 |
| CVE-2020-19417 | 8.8 | Mar 10 | Emerson Smart Wireless Gateway 1420 4.6.59 allows non-privileged users (such as the default account 'maint') to perform administrative tasks by sending specially crafted HTTP… Affected: 4.6.59 |
| CVE-2021-42536 | 6.5 | Oct 22 | The affected product is vulnerable to a disclosure of peer username and password by allowing all users access to read global variables Affected: before 4.7.94 |
Showing 8