Browse CVEs

HIGH 8.0 CVE-2024-43384 A low privileged remote attacker can gain the root password due to improper removal of sensitive information before storage or transfer. Fl Mguard 2102 Firmware 8.9.3 / 10.4.1+ Fix from $1,9502026-05-07 HIGH 7.1 CVE-2025-41748EPSS 10% An XSS vulnerability in pxc_Dot1xCfg.php can be used by an unauthenticated remote attacker to trick an authenticated user to click on the link provid… Fl Nat 2008 Firmware 3.50+ Fix from $1,9502025-12-09 HIGH 7.1 CVE-2025-41749 An XSS vulnerability in port_util.php can be used by an unauthenticated remote attacker to trick an authenticated user to click on the link provided … Fl Switch 2008f Firmware 3.50+ Fix from $1,9502025-12-09 HIGH 7.1 CVE-2025-41750EPSS 10% An XSS vulnerability in pxc_PortCfg.php can be used by an unauthenticated remote attacker to trick an authenticated user to click on the link provide… Fl Switch 2008f Firmware 3.50+ Fix from $1,9502025-12-09 HIGH 7.1 CVE-2025-41751EPSS 10% An XSS vulnerability in pxc_portCntr.php can be used by an unauthenticated remote attacker to trick an authenticated user to click on the link provid… Fl Nat 2008 Firmware 3.50+ Fix from $1,9502025-12-09 HIGH 7.1 CVE-2025-41752EPSS 10% An XSS vulnerability in pxc_portSfp.php can be used by an unauthenticated remote attacker to trick an authenticated user to click on the link provide… Fl Nat 2008 Firmware 3.50+ Fix from $1,9502025-12-09 HIGH 7.1 CVE-2025-41745 An XSS vulnerability in pxc_portCntr2.php can be used by an unauthenticated remote attacker to trick an authenticated user to send a manipulated POST… Fl Nat 2008 Firmware 3.50+ Fix from $1,9502025-12-09 HIGH 7.1 CVE-2025-41746EPSS 10% An XSS vulnerability in pxc_portSecCfg.php can be used by an unauthenticated remote attacker to trick an authenticated user to send a manipulated POS… Fl Switch 2406 2sfx Pn Firmware 3.50+ Fix from $1,9502025-12-09 HIGH 7.1 CVE-2025-41747EPSS 10% An XSS vulnerability in pxc_vlanIntfCfg.php can be used by an unauthenticated remote attacker to trick an authenticated user to send a manipulated PO… Fl Nat 2008 Firmware 3.50+ Fix from $1,9502025-12-09 MEDIUM 6.8 CVE-2025-41697 An attacker can use an undocumented UART port on the PCB as a side-channel to get root access e.g. with the credentials obtained from CVE-2025-416… Fl Switch 2708 Pn Firmware 3.50+ Fix from $1,6002025-12-09 HIGH 7.1 CVE-2025-41695 An XSS vulnerability in dyn_conn.php can be used by an unauthenticated remote attacker to trick an authenticated user to send a manipulated POST requ… Fl Nat 2008 Firmware 3.50+ Fix from $1,9502025-12-09 MEDIUM 6.8 CVE-2025-41692 A high privileged remote attacker with admin privileges for the webUI can brute-force the "root" and "user" passwords of the underlying OS due to a w… Fl Switch 2708 Pn Firmware 3.50+ Fix from $1,6002025-12-09 MEDIUM 6.5 CVE-2025-41694 A low privileged remote attacker can run the webshell with an empty command containing whitespace. The server will then block until it receives more … Fl Switch 2708 Pn Firmware 3.50+ Fix from $1,6002025-12-09 CRITICAL 9.8 CVE-2025-25270 An unauthenticated remote attacker can alter the device configuration in a way to get remote code execution as root with specific configurations. Charx Sec 3000 Firmware 1.7.3+ Fix from $2,3002025-07-08 HIGH 8.8 CVE-2025-25271 An unauthenticated adjacent attacker is able to configure a new OCPP backend, due to insecure defaults for the configuration interface. Charx Sec 3000 Firmware 1.7.3+ Fix from $1,9502025-07-08 HIGH 8.8 CVE-2025-25268 An unauthenticated adjacent attacker can modify configuration by sending specific requests to an API-endpoint resulting in read and write access due … Charx Sec 3000 Firmware 1.7.3+ Fix from $1,9502025-07-08 HIGH 8.4 CVE-2025-25269 An unauthenticated local attacker can inject a command that is subsequently executed as root, leading to a privilege escalation. Charx Sec 3000 Firmware 1.7.3+ Fix from $1,9502025-07-08 HIGH 7.8 CVE-2025-24005 A local attacker with a local user account can leverage a vulnerable script via SSH to escalate privileges to root due to improper input validation. Charx Sec 3000 Firmware 1.7.3+ Fix from $1,9502025-07-08 HIGH 7.8 CVE-2025-24006 A low privileged local attacker can leverage insecure permissions via SSH on the affected devices to escalate privileges to root. Charx Sec 3000 Firmware 1.7.3+ Fix from $1,9502025-07-08 MEDIUM 5.2 CVE-2025-24004 A physical attacker with access to the device display via USB-C can send a message to the device which triggers an unsecure copy to a buffer resultin… Charx Sec 3000 Firmware after 1.6.5 Fix from $1,6002025-07-08 HIGH 8.2 CVE-2025-24003 An unauthenticated remote attacker can use MQTT messages to trigger out-of-bounds writes in charging stations complying with German Calibration Law, … Charx Sec 3000 Firmware after 1.6.5 Fix from $1,9502025-07-08 MEDIUM 5.3 CVE-2025-24002 An unauthenticated remote attacker can use MQTT messages to crash a service on charging stations complying with German Calibration Law, resulting in … Charx Sec 3000 Firmware after 1.6.5 Fix from $1,6002025-07-08 HIGH 8.8 CVE-2024-7699 An low privileged remote attacker can execute OS commands with root privileges due to improper neutralization of special elements in user data. Tc Mguard Rs4000 4g Vzw Vpn Firmware 8.9.3+ Fix from $1,9502024-09-10 HIGH 8.1 CVE-2024-43392 A low privileged remote attacker can perform configuration changes of the firewall services, including packet filter, packet forwarding, network acce… Tc Mguard Rs4000 4g Vzw Vpn Firmware 8.9.3+ Fix from $1,9502024-09-10 HIGH 8.1 CVE-2024-43393 A low privileged remote attacker can perform configuration changes of the firewall services, including packet filter, packet forwarding, network acce… Tc Mguard Rs4000 4g Vzw Vpn Firmware 8.9.3+ Fix from $1,9502024-09-10 MEDIUM 5.7 CVE-2024-7698 A low privileged remote attacker can get access to CSRF tokens of higher privileged users which can be abused to mount CSRF attacks. Tc Mguard Rs4000 4g Vzw Vpn Firmware 8.9.3+ Fix from $1,6002024-09-10 HIGH 8.1 CVE-2024-43389 A low privileged remote attacker can perform configuration changes of the ospf service through OSPF_INTERFACE.SIMPLE_KEY, OSPF_INTERFACE.DIGEST_KEY e… Tc Mguard Rs4000 4g Vzw Vpn Firmware 8.9.3+ Fix from $1,9502024-09-10 HIGH 8.1 CVE-2024-43390 A low privileged remote attacker can perform configuration changes of the firewall services, including packet forwarding or NAT through the FW_NAT.IN… Tc Mguard Rs4000 4g Vzw Vpn Firmware 8.9.3+ Fix from $1,9502024-09-10 HIGH 8.1 CVE-2024-43391 A low privileged remote attacker can perform configuration changes of the firewall services, including packet filter, packet forwarding, network acce… Tc Mguard Rs4000 4g Vzw Vpn Firmware 8.9.3+ Fix from $1,9502024-09-10 HIGH 8.8 CVE-2024-43385 A low privileged remote attacker can trigger the execution of arbitrary OS commands as root due to improper neutralization of special elements in the… Tc Mguard Rs4000 4g Vzw Vpn Firmware 8.9.3+ Fix from $1,9502024-09-10