Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

Filtered by vendor Skyworthdigital Subscribe
Filtered by product Rn510
Total 3 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-25327 1 Skyworthdigital 2 Rn510, Rn510 Firmware 2022-07-12 4.3 MEDIUM 6.5 MEDIUM
Skyworth Digital Technology RN510 V.3.1.0.4 contains a cross-site request forgery (CSRF) vulnerability in /cgi-bin/net-routeadd.asp and /cgi-bin/sec-urlfilter.asp. Missing CSRF protection in devices can lead to XSRF, as the above pages are vulnerable to cross-site scripting (XSS).
CVE-2021-25328 1 Skyworthdigital 2 Rn510, Rn510 Firmware 2021-06-04 6.5 MEDIUM 8.8 HIGH
Skyworth Digital Technology RN510 V.3.1.0.4 RN510 V.3.1.0.4 contains a buffer overflow vulnerability in /cgi-bin/app-staticIP.asp. An authenticated attacker can send a specially crafted request to endpoint which can lead to a denial of service (DoS) or possible code execution on the device.
CVE-2021-25326 1 Skyworthdigital 2 Rn510, Rn510 Firmware 2021-06-04 3.5 LOW 5.4 MEDIUM
Skyworth Digital Technology RN510 V.3.1.0.4 is affected by an incorrect access control vulnerability in/cgi-bin/test_version.asp. If Wi-Fi is connected but an unauthenticated user visits a URL, the SSID password and web UI password may be disclosed.