Login Request a demo
PR
Vendor
Prolink
2 products with CVEs on record
5
CVEs
0
On KEV
0
New 30D
Products
PF
Prc2402m Firmware
Prolink
9.8
4 CVEs0 on KEV0 new
PR
PRC2402M
PROLiNK
10.0
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2021-35402
PR
PRC2402M
PROLiNK
10.0
1%
Feb 20PROLiNK PRC2402M 20190909 before 2021-06-13 allows live_api.cgi?page=satellite_list OS command injection via shell metacharacters in the ip parameter (for satellite_status)
CVE-2021-36708
PF
Prc2402m Firmware
Prolink
7.5
1%
Aug 6In ProLink PRC2402M V1.0.18 and older, the set_sys_init function in the login.cgi binary allows an attacker to reset the password to the administrative interface of the router
CVE-2021-36707
PF
Prc2402m Firmware
Prolink
9.8
3%
Aug 6In ProLink PRC2402M V1.0.18 and older, the set_ledonoff function in the adm.cgi binary, accessible with a page parameter value of ledonoff contains a trivial command injection…
CVE-2021-36706
PF
Prc2402m Firmware
Prolink
9.8
3%
Aug 6In ProLink PRC2402M V1.0.18 and older, the set_sys_cmd function in the adm.cgi binary, accessible with a page parameter value of sysCMD contains a trivial command injection where…
CVE-2021-36705
PF
Prc2402m Firmware
Prolink
9.8
3%
Aug 6In ProLink PRC2402M V1.0.18 and older, the set_TR069 function in the adm.cgi binary, accessible with a page parameter value of TR069 contains a trivial command injection where the…