Skip to content

Vulnerabilities of n/a Gryphon Tower router

Is your version affected?

CVE Summary Score Published
CVE-2021-20139 An unauthenticated command injection vulnerability exists in the parameters of operation 3 in the controller_server… Not rated Dec 9, 2021
CVE-2021-20138 An unauthenticated command injection vulnerability exists in multiple parameters in the Gryphon Tower router’s web… Not rated Dec 9, 2021
CVE-2021-20137 A reflected cross-site scripting vulnerability exists in the url parameter of the /cgi-bin/luci/site_access/ page on the… Not rated Dec 9, 2021
CVE-2021-20142 An unauthenticated command injection vulnerability exists in the parameters of operation 41 in the controller_server… Not rated Dec 9, 2021
CVE-2021-20141 An unauthenticated command injection vulnerability exists in the parameters of operation 32 in the controller_server… Not rated Dec 9, 2021
CVE-2021-20140 An unauthenticated command injection vulnerability exists in the parameters of operation 10 in the controller_server… Not rated Dec 9, 2021
CVE-2021-20146 An unprotected ssh private key exists on the Gryphon devices which could be used to achieve root access to a server… Not rated Dec 9, 2021
CVE-2021-20145 Gryphon Tower routers contain an unprotected openvpn configuration file which can grant attackers access to the… Not rated Dec 9, 2021
CVE-2021-20144 An unauthenticated command injection vulnerability exists in the parameters of operation 49 in the controller_server… Not rated Dec 9, 2021
CVE-2021-20143 An unauthenticated command injection vulnerability exists in the parameters of operation 48 in the controller_server… Not rated Dec 9, 2021

Other n/a products