VYPR

UniBox

by Wifi-soft

CVEs (2)

  • CVE-2019-3497HigMar 21, 2019
    risk 0.58cvss 8.8epss 0.09

    An issue was discovered on Wifi-soft UniBox controller 0.x through 2.x devices. The tools/ping Ping feature of the Diagnostic Tools component is vulnerable to Remote Command Execution, allowing an attacker to execute arbitrary system commands on the server with root user…

  • CVE-2019-3495HigMar 21, 2019
    risk 0.58cvss 8.8epss 0.05

    An issue was discovered on Wifi-soft UniBox controller 0.x through 2.x devices. network/mesh/edit-nds.php is vulnerable to arbitrary file upload, allowing an attacker to upload .php files and execute code on the server with root user privileges. Authentication for accessing this…