← Back

Microsemi

microsemi

4 CVEs • 2 products

Products (2)

Click to collapse
Toggle
S350i Firmware
s350i_firmware
4 CVEs
S350i
s350i
0 CVEs

CVEs (4)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2014-5070
1Microsemi
1S350i Firmware
Nov 21, 2024
Jan 11, 2018
N/A· v4
8.8 HIGH· v3
6.5 MEDIUM· v2
Symmetricom s350i 2.70.15 allows remote authenticated users to gain privileges via vectors related to pushing unauthenticated users to the login page.
CVE-2014-5068
1Microsemi
1S350i Firmware
Nov 21, 2024
Jan 11, 2018
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Directory traversal vulnerability in the web application in Symmetricom s350i 2.70.15 allows remote attackers to read arbitrary files via a (1) ../ (dot dot slash) or (2) ..\ (dot dot forward slash) before a file name.
CVE-2014-5071
1Microsemi
1S350i Firmware
Nov 21, 2024
Jan 8, 2018
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
SQL injection vulnerability in the checkPassword function in Symmetricom s350i 2.70.15 allows remote attackers to execute arbitrary SQL commands via vectors involving a username.
CVE-2014-5069
1Microsemi
1S350i Firmware
Nov 21, 2024
Jan 8, 2018
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in Symmetricom s350i 2.70.15 allows remote attackers to inject arbitrary web script or HTML via vectors involving system logs.