Critical severity9.8NVD Advisory· Published Sep 10, 2018· Updated Jun 17, 2026

CVE-2018-16705

Description

FURUNO FELCOM 250 and 500 devices allow unauthenticated access to the xml/permission.xml file containing all of the system's usernames and passwords. This includes the Admin and Service user accounts and their unsalted MD5 hashes, as well as the SMS server password in cleartext.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Furuno Systems Co.,ltd./FELCOM 250llm-create
Furuno Systems Co.,ltd./FELCOM 500llm-create

Patches

Vulnerability mechanics

References

cyberskr.com/blog/furuno-felcom.htmlnvdExploitTechnical DescriptionThird Party Advisory
gist.github.com/CyberSKR/c00eabd6b1d5603d724b615ab358ff31nvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000