VYPR

D603-2

by Qihoo 360

CVEs (3)

  • CVE-2026-121607CriNov 4, 2026
    risk 0.65cvss 10.0epss —

    A vulnerability was found in Qihoo 360 D603-2, D600-2, D606-6 and D706 up to 6.4.9. This affects the function testspeed_command of the file /fs2/bin/iscm. Performing a manipulation of the argument host results in os command injection. The attack may be initiated remotely. The…

  • CVE-2026-121606CriNov 4, 2026
    risk 0.65cvss 10.0epss —

    A vulnerability has been found in Qihoo 360 D621-2, D603-2, D600-2, D619, D606-6 and D706 up to 6.4.9. Affected by this issue is the function verify_sign of the file fs2/bin/iscm of the component Firmware Signature Verification. Such manipulation of the argument sign leads to…

  • CVE-2026-121608HigNov 4, 2026
    risk 0.47cvss 7.3epss —

    A vulnerability was determined in Qihoo 360 D603-2, D600-2 and D606-6 up to 6.3.2. This vulnerability affects the function on_push_message of the file /fs2/bin/iscm of the component Timezone Push Handler. Executing a manipulation of the argument tz can lead to os command…