Meinbwa

meinbwa

3 CVEs • 2 products

Products (2)

Click to collapse

Toggle

Direx Pro Firmware

direx-pro_firmware

CVEs (3)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2020-10250 1Meinbwa 1Direx Pro Firmware Nov 21, 2024 Mar 9, 2020 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 BWA DiREX-Pro 1.2181 devices allow remote attackers to execute arbitrary OS commands via shell metacharacters in the PKG parameter to uninstall.php3.
CVE-2020-10249 1Meinbwa 1Direx Pro Firmware Nov 21, 2024 Mar 9, 2020 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 BWA DiREX-Pro 1.2181 devices allow full path disclosure via an invalid name array parameter to val_soft.php3.
CVE-2020-10248 1Meinbwa 1Direx Pro Firmware Nov 21, 2024 Mar 9, 2020 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 BWA DiREX-Pro 1.2181 devices allow remote attackers to discover passwords via a direct request to val_users.php3.