Jiofi 4g M2s Firmware

jiofi_4g_m2s_firmware

Vendor: Jio • 3 CVEs

CVEs (3)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2019-7440 1Jio 1Jiofi 4g M2s Firmware Jun 17, 2026 Mar 21, 2019 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 JioFi 4G M2S 1.0.2 devices have CSRF via the SSID name and Security Key field under Edit Wi-Fi Settings (aka a SetWiFi_Setting request to cgi-bin/qcmap_web_cgi).
CVE-2019-7439 1Jio 1Jiofi 4g M2s Firmware Jun 17, 2026 Mar 21, 2019 N/A· v4 6.5 MEDIUM· v3 6.1 MEDIUM· v2 cgi-bin/qcmap_web_cgi on JioFi 4G M2S 1.0.2 devices allows a DoS (Hang) via the mask POST parameter.
CVE-2019-7438 1Jio 1Jiofi 4g M2s Firmware Jun 17, 2026 Mar 21, 2019 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 cgi-bin/qcmap_web_cgi on JioFi 4G M2S 1.0.2 devices has XSS and HTML injection via the mask POST parameter.