Etictelecom

Remote Access Server

5 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.1

CVE-2024-26154

  • EPSS 0.14%
  • Veröffentlicht 17.01.2025 17:15:11
  • Zuletzt bearbeitet 30.07.2025 17:13:00

All versions of ETIC Telecom Remote Access Server (RAS) prior to 4.5.0 are vulnerable to reflected cross site scripting in the appliance site name. The ETIC RAS web server saves the site name and then presents it to the administrators in a few dif...

8.6

CVE-2024-26155

  • EPSS 0.05%
  • Veröffentlicht 17.01.2025 17:15:11
  • Zuletzt bearbeitet 30.07.2025 17:11:39

All versions of ETIC Telecom Remote Access Server (RAS) prior to 4.5.0 expose clear text credentials in the web portal. An attacker can access the ETIC RAS web portal and view the HTML code, which is configured to be hidden, thus allowing a connec...

6.1

CVE-2024-26156

  • EPSS 0.14%
  • Veröffentlicht 17.01.2025 17:15:11
  • Zuletzt bearbeitet 30.07.2025 17:01:46

All versions of ETIC Telecom Remote Access Server (RAS) prior to 4.5.0 are vulnerable to reflected cross site scripting (XSS) attacks in the method parameter. The ETIC RAS web server uses dynamic pages that gets their input from the client side an...

6.1

CVE-2024-26157

  • EPSS 0.21%
  • Veröffentlicht 17.01.2025 17:15:11
  • Zuletzt bearbeitet 31.07.2025 18:20:55

All versions of ETIC Telecom Remote Access Server (RAS) prior to 4.5.0 are vulnerable to reflected cross site scripting (XSS) attacks in get view method under view parameter. The ETIC RAS web server uses dynamic pages that get their input from the...

7.4

CVE-2024-26153

  • EPSS 0.14%
  • Veröffentlicht 17.01.2025 17:15:10
  • Zuletzt bearbeitet 30.07.2025 17:15:26

All versions of ETIC Telecom Remote Access Server (RAS) prior to 4.9.19 are vulnerable to cross-site request forgery (CSRF). An external attacker with no access to the device can force the end user into submitting a "setconf" method request, not r...