MF
Product
Mir250 Firmware
5
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 2Medium 1Low 0
Watch
Add Mir250 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-10280 | 7.5 | Jun 24 | The Apache server on port 80 that host the web interface is vulnerable to a DoS by spamming incomplete HTTP headers, effectively blocking the access to the dashboard Affected: All versions, or not specified |
| CVE-2020-10274 | 7.1 | Jun 24 | The access tokens for the REST API are directly derived (sha256 and base64 encoding) from the publicly available default credentials from the Control Dashboard (refer to… Affected: All versions, or not specified |
Showing 2