Optilink Network OP-XT71000N 2.2
Approved changes feed: RSS · Atom
cpe:2.3:h:optilinknetwork:op-xt71000n:2.2:*:*:*:*:*:*:*
part: h version: 2.2 update: *
| Vendor | Optilinknetwork (42e4dddf-17c3-5879-970e-68657c712041) |
|---|---|
| Product | Op Xt71000N (333dc759-b07b-59cd-b3a2-11203bd9a058) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-23593 |
not_vulnerable | 2026-06-08 05:22:31.994823 |
Details available
A vulnerability in OPTILINK OP-XT71000N Hardware Version: V2.2, Firmware Version: OP_V3.3.1-191028 allows an unauthenticated, remote attacker to conduct a cross site request forgery (CSRF) attack to enable syslog mode through ' /mgm_log_cfg.asp.' The system starts to log events, 'Remote' mode or 'Both' mode on "Syslog -- Configuration page" logs events and sends to remote syslog server IP and Port.
Published: 2022-11-23T00:00:00.000Z
Updated: 2025-04-29T16:02:29.041Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-23592 |
not_vulnerable | 2026-06-08 05:22:31.994301 |
Details available
A vulnerability in OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OP_V3.3.1-191028 allows an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack to Reset ONU to Factory Default through ' /mgm_dev_reset.asp.' Resetting to default leads to Escalation of Privileges by logging-in with default credentials.
Published: 2022-11-23T00:00:00.000Z
Updated: 2025-04-29T15:56:45.921Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-23591 |
not_vulnerable | 2026-06-08 05:22:31.993757 |
Details available
A vulnerability in OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OP_V3.3.1-191028 allows an attacker to upload arbitrary files through " /mgm_dev_upgrade.asp " which can "delete every file for Denial of Service (using 'rm -rf *.*' in the code), reverse connection (using '.asp' webshell), backdoor.
Published: 2022-11-23T00:00:00.000Z
Updated: 2025-04-29T15:57:51.319Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-23590 |
not_vulnerable | 2026-06-08 05:22:31.993099 |
Details available
A vulnerability in Optilink OP-XT71000N Hardware version: V2.2 , Firmware Version: OP_V3.3.1-191028 allows an unauthenticated remote attacker to conduct a cross-site request forgery (CSRF) attack to change the Password for "WLAN SSID" through "wlwpa.asp".
Published: 2022-11-23T00:00:00.000Z
Updated: 2025-04-29T15:58:53.542Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-23589 |
not_vulnerable | 2026-06-08 05:22:31.992622 |
Details available
A vulnerability in OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OP_V3.3.1-191028 allows an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack to cause a Denial of Service by Rebooting the router through " /mgm_dev_reboot.asp."
Published: 2022-11-23T00:00:00.000Z
Updated: 2025-04-29T15:59:56.213Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-23588 |
not_vulnerable | 2026-06-08 05:22:31.992138 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-23587 |
not_vulnerable | 2026-06-08 05:22:31.991646 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-23586 |
not_vulnerable | 2026-06-08 05:22:31.991067 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-23585 |
not_vulnerable | 2026-06-08 05:22:31.990600 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-23584 |
not_vulnerable | 2026-06-08 05:22:31.990028 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-23583 |
not_vulnerable | 2026-06-08 05:22:31.989527 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-23582 |
not_vulnerable | 2026-06-08 05:22:31.988762 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.