← Back

Tebe Small Firmware

tebe_small_firmware

Vendor: Saet • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2019-9106
1Saet
2Tebe Small Firmware
Webapp
Jun 17, 2026
May 31, 2019
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
The WebApp v04.68 in the supervisor on SAET Impianti Speciali TEBE Small 05.01 build 1137 devices allows remote attackers to execute or include local .php files, as demonstrated by menu=php://filter/convert.base64-encode...Show more
The WebApp v04.68 in the supervisor on SAET Impianti Speciali TEBE Small 05.01 build 1137 devices allows remote attackers to execute or include local .php files, as demonstrated by menu=php://filter/convert.base64-encode/resource=index.php to read index.php.Show less
CVE-2019-9105
1Saet
2Tebe Small Firmware
Webapp
Jun 17, 2026
May 31, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The WebApp v04.68 in the supervisor on SAET Impianti Speciali TEBE Small 05.01 build 1137 devices allows remote attackers to make several types of API calls without authentication, as demonstrated by retrieving password...Show more
The WebApp v04.68 in the supervisor on SAET Impianti Speciali TEBE Small 05.01 build 1137 devices allows remote attackers to make several types of API calls without authentication, as demonstrated by retrieving password hashes via an inc/utils/REST_API.php?command=CallAPI&customurl=alladminusers call.Show less