IP
Vendor
Ip-com
4 products with CVEs on record
22
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-2017
W3
W30AP
IP-COM
9.8
5%
Feb 6IP-COM W30AP POST Request wx3auth R7WebsSecurityHandler stack-based overflow
CVE-2022-45721
MF
M50 Firmware
Ip-com
9.8
1%
Dec 23IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the picName parameter in the formDelWewifiPic function
CVE-2022-45720
MF
M50 Firmware
Ip-com
9.8
1%
Dec 23IP-COM M50 V15.11.0.33(10768) was discovered to contain multiple buffer overflows via the ip, mac, and remark parameters in the formIPMacBindModify function
CVE-2022-45719
MF
M50 Firmware
Ip-com
9.8
1%
Dec 23IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the gotoUrl parameter in the formPortalAuth function
CVE-2022-45718
MF
M50 Firmware
Ip-com
9.8
1%
Dec 23IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the rules parameter in the formIPMacBindAdd function
CVE-2022-45717
MF
M50 Firmware
Ip-com
9.8
4%
Dec 23IP-COM M50 V15.11.0.33(10768) was discovered to contain a command injection vulnerability via the usbPartitionName parameter in the formSetUSBPartitionUmount function
CVE-2022-45716
MF
M50 Firmware
Ip-com
9.8
1%
Dec 23IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the indexSet parameter in the formIPMacBindDel function
CVE-2022-45715
MF
M50 Firmware
Ip-com
9.8
1%
Dec 23IP-COM M50 V15.11.0.33(10768) was discovered to contain multiple buffer overflows via the pLanPortRange and pWanPortRange parameters in the formSetPortMapping function
CVE-2022-45714
MF
M50 Firmware
Ip-com
9.8
1%
Dec 23IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the indexSet parameter in the formQOSRuleDel function
CVE-2022-45712
MF
M50 Firmware
Ip-com
9.8
1%
Dec 23IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the rules parameter in the formAddDnsForward function
CVE-2022-45711
MF
M50 Firmware
Ip-com
9.8
20%
Dec 23IP-COM M50 V15.11.0.33(10768) was discovered to contain a command injection vulnerability via the hostname parameter in the formSetNetCheckTools function
CVE-2022-45710
MF
M50 Firmware
Ip-com
9.8
1%
Dec 23IP-COM M50 V15.11.0.33(10768) was discovered to contain multiple buffer overflows via the pEnable, pLevel, and pModule parameters in the formSetDebugCfg function
CVE-2022-45709
MF
M50 Firmware
Ip-com
9.8
4%
Dec 23IP-COM M50 V15.11.0.33(10768) was discovered to contain multiple command injection vulnerabilities via the pEnable, pLevel, and pModule parameters in the formSetDebugCfg function
CVE-2022-45708
MF
M50 Firmware
Ip-com
9.8
1%
Dec 23IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the sPortMapIndex parameter in the formDelPortMapping function
CVE-2022-45707
MF
M50 Firmware
Ip-com
9.8
1%
Dec 23IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the rules parameter in the formAddDnsHijack function
CVE-2022-45706
MF
M50 Firmware
Ip-com
9.8
1%
Dec 23IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the hostname parameter in the formSetNetCheckTools function
CVE-2022-45005
EF
Ew9 Firmware
Ip-com
9.8
5%
Dec 13IP-COM EW9 V15.11.0.14(9732) was discovered to contain a command injection vulnerability in the cmd_get_ping_output function
CVE-2022-43365
EF
Ew9 Firmware
Ip-com
7.5
1%
Oct 27IP-COM EW9 V15.11.0.14(9732) was discovered to contain a buffer overflow in the formSetDebugCfg function
CVE-2022-43367
EF
Ew9 Firmware
Ip-com
9.8
3%
Oct 27IP-COM EW9 V15.11.0.14(9732) was discovered to contain a command injection vulnerability in the formSetDebugCfg function
CVE-2022-43366
EF
Ew9 Firmware
Ip-com
7.5
1%
Oct 27IP-COM EW9 V15.11.0.14(9732) allows unauthenticated attackers to access sensitive information via the checkLoginUser, ate, telnet, version, setDebugCfg, and boot interfaces
CVE-2022-43364
EF
Ew9 Firmware
Ip-com
7.5
1%
Oct 27An access control issue in the password reset page of IP-COM EW9 V15.11.0.14(9732) allows unauthenticated attackers to arbitrarily change the admin password