cbcvebase.

Sercomm H500S Firmware vulnerabilities

1 known vulnerability affecting sercomm/h500s_firmware.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH1

Vulnerabilities

Page 1 of 1
CVE-2021-44080P2HIGHCVSS 7.2vlowi-h500s-v3.4.222022-06-02
CVE-2021-44080 [HIGH] CWE-78 CVE-2021-44080: A Command Injection vulnerability in httpd web server (setup.cgi) in SerComm h500s, FW: lowi-h500s-v A Command Injection vulnerability in httpd web server (setup.cgi) in SerComm h500s, FW: lowi-h500s-v3.4.22 allows logged in administrators to arbitrary OS commands as root in the device via the connection_type parameter of the statussupport_diagnostic_tracing.json endpoint.
nvd
Sercomm H500S Firmware vulnerabilities | cvebase