airties vulnerabilities

Products

• 5444 firmware 1
• 5444tt firmware 1
• air 4450 1
• air 4920 firmware 1
• air 4921 firmware 1
• air 4971 firmware 1
• air 5021 firmware 1
• air 5341 firmware 1
• air 5343v2 firmware 1
• air 5442 firmware 1
• air 5443v2 firmware 1
• air 5453 firmware 1
• air 5650 firmware 1
• air 5750 firmware 1
• air 6372 1
• air firmware 1
• Air4443 Firmware 1
• rt-210 firmware 1

Latest airties CVEs

Newest publication first

1. CVE-2024-9477 XSS in AirTies' Air4443 Firmware

   Published 2024-11-13

   Medium·CVSS 4.6 EPSS 0.20%

   Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in AirTies Air4443 Firmware allows Cross-Site Scripting (XSS). This issue affects Air4443 Firmware: through 14102024. NOTE: The vendor was contacted and it was learned that t...

2. CVE-2022-38789 An issue was discovered in Airties Smart Wi-Fi before 2020-08-04. It allows attackers to change the main/guest SSID and the PSK to arbitrary values, and map the LAN, because of Insecure Direct Object....

   Published 2022-09-15

   Critical·CVSS 9.1 EPSS 1.2%

   An issue was discovered in Airties Smart Wi-Fi before 2020-08-04. It allows attackers to change the main/guest SSID and the PSK to arbitrary values, and map the LAN, because of Insecure Direct Object Reference.

3. CVE-2019-6967 AirTies Air5341 1.0.0.12 devices allow cgi-bin/login CSRF.

   Published 2019-03-17

   High·CVSS 8.8 EPSS 13.5%

   AirTies Air5341 1.0.0.12 devices allow cgi-bin/login CSRF.

4. CVE-2018-17594 AirTies Air 5443v2 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter.

   Published 2018-10-02

   Medium·CVSS 6.1 EPSS 0.99%

   AirTies Air 5443v2 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter.

5. CVE-2018-17589 AirTies Air 5650 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter.

   Published 2018-10-02

   Medium·CVSS 6.1 EPSS 1.00%

   AirTies Air 5650 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter.

6. CVE-2018-17587 AirTies Air 5750 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter.

   Published 2018-10-02

   Medium·CVSS 6.1 EPSS 2.3%

   AirTies Air 5750 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter.

7. CVE-2018-17588 AirTies Air 5021 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter.

   Published 2018-10-02

   Medium·CVSS 6.1 EPSS 2.3%

   AirTies Air 5021 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter.

8. CVE-2018-17590 AirTies Air 5442 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter.

   Published 2018-10-02

   Medium·CVSS 6.1 EPSS 2.3%

   AirTies Air 5442 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter.

9. CVE-2018-17591 AirTies Air 5343v2 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter.

   Published 2018-10-02

   Medium·CVSS 6.1 EPSS 2.3%

   AirTies Air 5343v2 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter.

10. CVE-2018-17593 AirTies Air 5453 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter.

    Published 2018-10-02

    Medium·CVSS 6.1 EPSS 2.3%

    AirTies Air 5453 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter.

11. CVE-2018-8738 Airties 5444 1.0.0.18 and 5444TT 1.0.0.18 devices allow XSS.

    Published 2018-07-05

    Medium·CVSS 6.1 EPSS 2.2% Public exploit

    Airties 5444 1.0.0.18 and 5444TT 1.0.0.18 devices allow XSS.

12. CVE-2015-4679 Multiple cross-site scripting (XSS) vulnerabilities in the web interface in Airties RT-210 allow remote attackers to inject arbitrary web script or HTML via the (1) ddns_domainame or (2) ddns_account....

    Published 2015-06-19

    Medium·CVSS 4.3 EPSS 1.5%

    Multiple cross-site scripting (XSS) vulnerabilities in the web interface in Airties RT-210 allow remote attackers to inject arbitrary web script or HTML via the (1) ddns_domainame or (2) ddns_account parameter to ddns.stm.

13. CVE-2015-2797 Stack-based buffer overflow in AirTies Air 6372, 5760, 5750, 5650TT, 5453, 5444TT, 5443, 5442, 5343, 5342, 5341, and 5021 DSL modems with firmware 1.0.2.0 and earlier allows remote attackers to execut...

    Published 2015-06-19

    High·CVSS 10.0 EPSS 77.7% Framework module Public exploit

    Stack-based buffer overflow in AirTies Air 6372, 5760, 5750, 5650TT, 5453, 5444TT, 5443, 5442, 5343, 5342, 5341, and 5021 DSL modems with firmware 1.0.2.0 and earlier allows remote attackers to execute arbitrary code via a long string in the redirect parameter to cgi-bin/login.

14. CVE-2014-100032 Cross-site scripting (XSS) vulnerability in top.html in the Airties Air 6372 modem allows remote attackers to inject arbitrary web script or HTML via the productboardtype parameter.

    Published 2015-01-13

    Medium·CVSS 4.3 EPSS 1.4%

    Cross-site scripting (XSS) vulnerability in top.html in the Airties Air 6372 modem allows remote attackers to inject arbitrary web script or HTML via the productboardtype parameter.

15. CVE-2012-0902 AirTies Air 4450 1.1.2.18 allows remote attackers to cause a denial of service (reboot) via a direct request to cgi-bin/loader.

    Published 2012-01-20

    Medium·CVSS 5.0 EPSS 2.7%

    AirTies Air 4450 1.1.2.18 allows remote attackers to cause a denial of service (reboot) via a direct request to cgi-bin/loader.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.