Furuno

furuno

3 CVEs • 4 products

Products (4)

Click to collapse

Toggle

Felcom 250 Firmware

felcom_250_firmware

Felcom 500 Firmware

felcom_500_firmware

CVEs (3)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2018-16705 1Furuno 2Felcom 250 Firmware Felcom 500 Firmware Nov 21, 2024 Sep 10, 2018 N/A· v4 9.8 CRITICAL· v3 5.0 MEDIUM· v2 FURUNO FELCOM 250 and 500 devices allow unauthenticated access to the xml/permission.xml file containing all of the system's usernames and passwords. This includes the Admin and Service user accounts and their unsalted M...Show more FURUNO FELCOM 250 and 500 devices allow unauthenticated access to the xml/permission.xml file containing all of the system's usernames and passwords. This includes the Admin and Service user accounts and their unsalted MD5 hashes, as well as the SMS server password in cleartext.Show less
CVE-2018-16591 1Furuno 2Felcom 250 Firmware Felcom 500 Firmware Nov 21, 2024 Sep 10, 2018 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 FURUNO FELCOM 250 and 500 devices allow unauthenticated users to change the password for the Admin, Log and Service accounts, as well as the password for the protected "SMS" panel via /cgi-bin/sm_changepassword.cgi and /...Show more FURUNO FELCOM 250 and 500 devices allow unauthenticated users to change the password for the Admin, Log and Service accounts, as well as the password for the protected "SMS" panel via /cgi-bin/sm_changepassword.cgi and /cgi-bin/sm_sms_changepasswd.cgi.Show less
CVE-2018-16590 1Furuno 2Felcom 250 Firmware Felcom 500 Firmware Nov 21, 2024 Sep 6, 2018 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 FURUNO FELCOM 250 and 500 devices use only client-side JavaScript in login.js for authentication.