Xantech WIC1200 Firmware 1.1
Approved changes feed: RSS · Atom
cpe:2.3:o:xantech:wic1200_firmware:1.1:*:*:*:*:*:*:*part: o version: 1.1 update: *
| Vendor | Xantech (363520b2-4b9f-5d24-bf38-32cf17459433) |
|---|---|
| Product | Wic1200 Firmware (10bed9d0-1a47-5399-b3f6-43ffdcbbe840) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-0556 |
vulnerable | 2026-06-08 06:22:01.342587 |
Weak Cryptography for Passwords vulnerability on WIC1200
HIGH (7.1)
A Weak Cryptography for Passwords vulnerability has been detected on WIC200 affecting version 1.1. This vulnerability allows a remote user to intercept the traffic and retrieve the credentials from another user and decode it in base64 allowing the attacker to see the credentials in plain text.
Published: 2024-01-16T10:10:58.438Z
Updated: 2024-11-13T20:18:15.269Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-0555 |
vulnerable | 2026-06-08 06:22:01.342004 |
Cross-Site Request Forgery (CSRF) vulnerability on WIC1200
MEDIUM (4.6)
A Cross-Site Request Forgery (CSRF) vulnerability has been found on WIC1200, affecting version 1.1. An authenticated user could lead another user into executing unwanted actions inside the application they are logged in. This vulnerability is possible due to the lack of propper CSRF token implementation.
Published: 2024-01-16T10:09:58.665Z
Updated: 2025-06-17T21:19:15.624Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-0554 |
vulnerable | 2026-06-08 06:22:01.340678 |
Cross-site scripting (XSS) vulnerability on WIC1200
MEDIUM (5.5)
A Cross-site scripting (XSS) vulnerability has been found on WIC1200, affecting version 1.1. An authenticated user could store a malicious javascript payload in the device model parameter via '/setup/diags_ir_learn.asp', allowing the attacker to retrieve the session details of another user.
Published: 2024-01-16T10:08:29.929Z
Updated: 2025-06-02T15:11:31.696Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.