Aver EH6108H+

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:h:aver:eh6108h\+:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorAver (c0d4dc1d-2b4c-5232-acdb-069d2b8aaa38)
ProductEh6108H+ (29aac6dc-a0ea-5420-b4fa-af46e4e34c7f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2016-6537 not_vulnerable 2026-06-08 05:08:02.697801 Details available
AVer Information EH6108H+ devices with firmware X9.03.24.00.07l store passwords in a cleartext base64 format and require cleartext credentials in HTTP Cookie headers, which allows context-dependent attacks to obtain sensitive information by reading these strings.
Published: 2016-09-19T01:00:00.000Z
Updated: 2024-08-06T01:36:27.388Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6536 not_vulnerable 2026-06-08 05:08:02.697376 Details available
The /setup URI on AVer Information EH6108H+ devices with firmware X9.03.24.00.07l allows remote attackers to bypass intended page-access restrictions or modify passwords by leveraging knowledge of a handle parameter value.
Published: 2016-09-19T01:00:00.000Z
Updated: 2024-08-06T01:36:27.289Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6535 not_vulnerable 2026-06-08 05:08:02.695874 Details available
AVer Information EH6108H+ devices with firmware X9.03.24.00.07l have hardcoded accounts, which allows remote attackers to obtain root access by leveraging knowledge of the credentials and establishing a TELNET session.
Published: 2016-09-19T01:00:00.000Z
Updated: 2024-08-06T01:36:27.289Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.