VYPR

NH-FB Series

by PATLITE

CVEs (2)

  • CVE-2018-18473CriMar 21, 2019
    risk 0.64cvss 9.8epss 0.06

    A hidden backdoor on PATLITE NH-FB Series devices with firmware version 1.45 or earlier, NH-FV Series devices with firmware version 1.10 or earlier, and NBM Series devices with firmware version 1.09 or earlier allow attackers to enable an SSH daemon via the "kankichi" or…

  • CVE-2022-35911HigJul 27, 2022
    risk 0.49cvss 7.5epss 0.03

    On Patlite NH-FB series devices through 1.46, remote attackers can cause a denial of service by omitting the query string. NOTE: the vendor's perspective is that "omitting the query string does not cause a denial of service and the indicated event can not be reproduced.