Multitech

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-25201 1Multitech 2Conduit Ap Mtcap2 L4e1 868 042a Firmware Conduit Ap Mtcap2 L4e1 Firmware Nov 21, 2024 Jul 7, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 Cross Site Request Forgery (CSRF) vulnerability in MultiTech Conduit AP MTCAP2-L4E1 MTCAP2-L4E1-868-042A v.6.0.0 allows a remote attacker to execute arbitrary code via a crafted script upload.
CVE-2020-7594 1Multitech 1Conduit Mtcdt Lvw2 246a Firmware Nov 21, 2024 Jan 21, 2020 N/A· v4 7.2 HIGH· v3 9.0 HIGH· v2 MultiTech Conduit MTCDT-LVW2-24XX 1.4.17-ocea-13592 devices allow remote authenticated administrators to execute arbitrary OS commands by navigating to the Debug Options page and entering shell metacharacters in the inte...Show more MultiTech Conduit MTCDT-LVW2-24XX 1.4.17-ocea-13592 devices allow remote authenticated administrators to execute arbitrary OS commands by navigating to the Debug Options page and entering shell metacharacters in the interface JSON field of the ping function.Show less
CVE-2018-17562 1Multitech 1Faxfinder Nov 21, 2024 Oct 3, 2018 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Multi-Tech FaxFinder before 5.1.6 has SQL Injection via a status/call_details?oid= URI, allowing an attacker to extract the underlying database schema to further disclose other fax server information through different in...Show more Multi-Tech FaxFinder before 5.1.6 has SQL Injection via a status/call_details?oid= URI, allowing an attacker to extract the underlying database schema to further disclose other fax server information through different injection points.Show less
CVE-2016-10512 1Multitech 1Faxfinder May 13, 2026 Sep 30, 2017 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 MultiTech FaxFinder before 4.1.2 stores Passwords unencrypted for maintaining the test connectivity function of its LDAP configuration. These credentials are retrieved by the system when the LDAP configuration page is op...Show more MultiTech FaxFinder before 4.1.2 stores Passwords unencrypted for maintaining the test connectivity function of its LDAP configuration. These credentials are retrieved by the system when the LDAP configuration page is opened and are embedded directly into the HTML source code in cleartext.Show less
CVE-2003-0126 1Multitech 1Routefinder 550 Vpn Apr 16, 2026 Mar 18, 2003 N/A· v4 N/A· v3 7.5 HIGH· v2 The web interface for SOHO Routefinder 550 firmware 4.63 and earlier, and possibly later versions, has a default "admin" account with a blank password, which could allow attackers on the LAN side to conduct unauthorized...Show more The web interface for SOHO Routefinder 550 firmware 4.63 and earlier, and possibly later versions, has a default "admin" account with a blank password, which could allow attackers on the LAN side to conduct unauthorized activities.Show less
CVE-2003-0125 1Multitech 1Routefinder 550 Vpn Apr 16, 2026 Mar 18, 2003 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Buffer overflow in the web interface for SOHO Routefinder 550 before firmware 4.63 allows remote attackers to cause a denial of service (reboot) and execute arbitrary code via a long GET /OPTIONS value.