Airties

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2024-9477 1Airties 1Air4443 Firmware Jun 2, 2026 Nov 13, 2024 4.6 MEDIUM· v4 6.1 MEDIUM· v3 N/A· v2 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in AirTies Air4443 Firmware allows Cross-Site Scripting (XSS). This issue affects Air4443 Firmware: through 14102...Show more Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in AirTies Air4443 Firmware allows Cross-Site Scripting (XSS). This issue affects Air4443 Firmware: through 14102024. NOTE: The vendor was contacted and it was learned that the product classified as End-of-Life and End-of-Support.Show less
CVE-2022-38789 1Airties 3Air 4920 Firmware Air 4921 FirmwareAir 4971 Firmware Nov 21, 2024 Sep 15, 2022 N/A· v4 9.1 CRITICAL· v3 N/A· v2 An issue was discovered in Airties Smart Wi-Fi before 2020-08-04. It allows attackers to change the main/guest SSID and the PSK to arbitrary values, and map the LAN, because of Insecure Direct Object Reference.
CVE-2019-6967 1Airties 1Air 5341 Firmware Nov 21, 2024 Mar 21, 2019 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 AirTies Air5341 1.0.0.12 devices allow cgi-bin/login CSRF.
CVE-2018-17594 1Airties 1Air 5443v2 Firmware Nov 21, 2024 Oct 2, 2018 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 AirTies Air 5443v2 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter.
CVE-2018-17593 1Airties 1Air 5453 Firmware Nov 21, 2024 Oct 2, 2018 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 AirTies Air 5453 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter.
CVE-2018-17591 1Airties 1Air 5343v2 Firmware Nov 21, 2024 Oct 2, 2018 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 AirTies Air 5343v2 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter.
CVE-2018-17590 1Airties 1Air 5442 Firmware Nov 21, 2024 Oct 2, 2018 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 AirTies Air 5442 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter.
CVE-2018-17589 1Airties 1Air 5650 Firmware Nov 21, 2024 Oct 2, 2018 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 AirTies Air 5650 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter.
CVE-2018-17588 1Airties 1Air 5021 Firmware Nov 21, 2024 Oct 2, 2018 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 AirTies Air 5021 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter.
CVE-2018-17587 1Airties 1Air 5750 Firmware Nov 21, 2024 Oct 2, 2018 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 AirTies Air 5750 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter.
CVE-2018-8738 1Airties 25444 Firmware 5444tt Firmware Nov 21, 2024 Jul 5, 2018 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 Airties 5444 1.0.0.18 and 5444TT 1.0.0.18 devices allow XSS.
CVE-2015-4679 1Airties 1Rt 210 Firmware May 6, 2026 Jun 19, 2015 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Multiple cross-site scripting (XSS) vulnerabilities in the web interface in Airties RT-210 allow remote attackers to inject arbitrary web script or HTML via the (1) ddns_domainame or (2) ddns_account parameter to ddns.st...Show more Multiple cross-site scripting (XSS) vulnerabilities in the web interface in Airties RT-210 allow remote attackers to inject arbitrary web script or HTML via the (1) ddns_domainame or (2) ddns_account parameter to ddns.stm.Show less
CVE-2015-2797 1Airties 1Air Firmware May 6, 2026 Jun 19, 2015 N/A· v4 N/A· v3 10.0 HIGH· v2 Stack-based buffer overflow in AirTies Air 6372, 5760, 5750, 5650TT, 5453, 5444TT, 5443, 5442, 5343, 5342, 5341, and 5021 DSL modems with firmware 1.0.2.0 and earlier allows remote attackers to execute arbitrary code via...Show more Stack-based buffer overflow in AirTies Air 6372, 5760, 5750, 5650TT, 5453, 5444TT, 5443, 5442, 5343, 5342, 5341, and 5021 DSL modems with firmware 1.0.2.0 and earlier allows remote attackers to execute arbitrary code via a long string in the redirect parameter to cgi-bin/login.Show less
CVE-2014-100032 1Airties 1Air 6372 May 6, 2026 Jan 13, 2015 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in top.html in the Airties Air 6372 modem allows remote attackers to inject arbitrary web script or HTML via the productboardtype parameter.
CVE-2012-0902 1Airties 1Air 4450 Apr 29, 2026 Jan 20, 2012 N/A· v4 N/A· v3 5.0 MEDIUM· v2 AirTies Air 4450 1.1.2.18 allows remote attackers to cause a denial of service (reboot) via a direct request to cgi-bin/loader.