| CVE-2026-22323 |
A CSRF vulnerability in the Link Aggregation configuration interface allows an unauthenticated remote attacker to…
|
7.1
High
|
Mar 18, 2026 |
| CVE-2026-22322 |
A stored cross‑site scripting (XSS) vulnerability in the Link Aggregation configuration interface allows an…
|
7.1
High
|
Mar 18, 2026 |
| CVE-2026-22321 |
A stack-based buffer overflow in the device's Telnet/SSH CLI login routine occurs when a unauthenticated attacker send…
|
5.3
Medium
|
Mar 18, 2026 |
| CVE-2026-22320 |
A stack-based buffer overflow in the CLI's TFTP file‑transfer command handling allows a low-privileged attacker with…
|
6.5
Medium
|
Mar 18, 2026 |
| CVE-2026-22319 |
A stack-based buffer overflow in the device's file installation workflow allows a high-privileged attacker to send…
|
4.9
Medium
|
Mar 18, 2026 |
| CVE-2026-22318 |
A stack-based buffer overflow vulnerability in the device's file transfer parameter workflow allows a high-privileged…
|
4.9
Medium
|
Mar 18, 2026 |
| CVE-2026-22317 |
A command injection vulnerability in the device’s Root CA certificate transfer workflow allows a high-privileged…
|
7.2
High
|
Mar 18, 2026 |
| CVE-2026-22316 |
A remote attacker with user privileges for the webUI can use the setting of the TFTP Filename with a POST Request to…
|
6.5
Medium
|
Mar 18, 2026 |
| CVE-2025-41693 |
A low privileged remote attacker can use the ssh feature to execute commands directly after login
|
4.3
Medium
|
Dec 9, 2025 |
| CVE-2025-41696 |
An attacker can use an undocumented UART port on the PCB as a side-channel with the user hardcoded credentials…
|
4.6
Medium
|
Dec 9, 2025 |
| CVE-2025-41694 |
A low privileged remote attacker can run the webshell with an empty command containing whitespace
|
6.5
Medium
|
Dec 9, 2025 |
| CVE-2025-41692 |
A high privileged remote attacker with admin privileges for the webUI can brute-force the "root" and "user" passwords of…
|
6.8
Medium
|
Dec 9, 2025 |
| CVE-2025-41697 |
An attacker can use an undocumented UART port on the PCB as a side-channel to get root access e.g
|
6.8
Medium
|
Dec 9, 2025 |
| CVE-2025-41695 |
An XSS vulnerability in dyn_conn.php can be used by an unauthenticated remote attacker to trick an authenticated user to…
|
7.1
High
|
Dec 9, 2025 |
| CVE-2025-41745 |
An XSS vulnerability in pxc_portCntr2.php can be used by an unauthenticated remote attacker to trick an authenticated…
|
7.1
High
|
Dec 9, 2025 |
| CVE-2025-41746 |
An XSS vulnerability in pxc_portSecCfg.php can be used by an unauthenticated remote attacker to trick an authenticated…
|
7.1
High
|
Dec 9, 2025 |
| CVE-2025-41747 |
An XSS vulnerability in pxc_vlanIntfCfg.php can be used by an unauthenticated remote attacker to trick an…
|
7.1
High
|
Dec 9, 2025 |
| CVE-2025-41748 |
An XSS vulnerability in pxc_Dot1xCfg.php can be used by an unauthenticated remote attacker to trick an authenticated…
|
7.1
High
|
Dec 9, 2025 |
| CVE-2025-41749 |
An XSS vulnerability in port_util.php can be used by an unauthenticated remote attacker to trick an authenticated user…
|
7.1
High
|
Dec 9, 2025 |
| CVE-2025-41750 |
An XSS vulnerability in pxc_PortCfg.php can be used by an unauthenticated remote attacker to trick an authenticated user…
|
7.1
High
|
Dec 9, 2025 |
| CVE-2025-41751 |
An XSS vulnerability in pxc_portCntr.php can be used by an unauthenticated remote attacker to trick an authenticated…
|
7.1
High
|
Dec 9, 2025 |
| CVE-2025-41752 |
An XSS vulnerability in pxc_portSfp.php can be used by an unauthenticated remote attacker to trick an authenticated user…
|
7.1
High
|
Dec 9, 2025 |