Approved changes feed: RSS · Atom

cpe:2.3:o:skyworthdigital:cm5100_firmware:4.1.1.24:*:*:*:*:*:*:*

part: o version: 4.1.1.24 update: *

VendorSkyworthdigital (63db7fe3-cd76-59f8-8d0c-01b89f1c3289)
ProductCm5100 Firmware (5df310a7-ac04-5116-a276-1b866b3692af)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-44815 vulnerable 2026-06-08 06:45:54.199770 Details available
Vulnerability in Hathway Skyworth Router CM5100 v.4.1.1.24 allows a physically proximate attacker to obtain user credentials via SPI flash Firmware W25Q64JV.
Published: 2024-09-10T00:00:00.000Z
Updated: 2024-09-10T21:11:56.393Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-51743 vulnerable 2026-06-08 06:17:53.820881 Buffer Overflow vulnerability in Skyworth Router
MEDIUM (6.5)
This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the Set Upstream Channel ID (UCID) parameter at its web interface. A remote attacker could exploit this vulnerability by supplying specially crafted input to the parameter at the web interface of the vulnerable targeted system. Successful exploitation of this vulnerability could allow the attacker to perform a Denial of Service (DoS) attack on the targeted system.
Published: 2024-01-17T08:00:11.223Z
Updated: 2025-06-17T21:19:18.666Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-51742 vulnerable 2026-06-08 06:17:53.820212 Buffer Overflow vulnerability in Skyworth Router
MEDIUM (6.5)
This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the Add Downstream Frequency parameter at its web interface. A remote attacker could exploit this vulnerability by supplying specially crafted input to the parameter at the web interface of the vulnerable targeted system. Successful exploitation of this vulnerability could allow the attacker to perform a Denial of Service (DoS) attack on the targeted system.
Published: 2024-01-17T07:57:14.510Z
Updated: 2025-06-17T21:19:18.535Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-51741 vulnerable 2026-06-08 06:17:53.819790 Cleartext Submission of Password vulnerability in Skyworth Router
HIGH (7.5)
This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to transmission of authentication credentials in plaintext over the network. A remote attacker could exploit this vulnerability by eavesdropping on the victim’s network traffic to extract username and password from the web interface (Password Reset Page) of the vulnerable targeted system.
Published: 2024-01-17T07:26:46.152Z
Updated: 2025-06-17T21:19:18.410Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-51740 vulnerable 2026-06-08 06:17:53.819352 Cleartext Submission of Password vulnerability in Skyworth Router
HIGH (7.5)
This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to transmission of authentication credentials in plaintext over the network. A remote attacker could exploit this vulnerability by eavesdropping on the victim’s network traffic to extract username and password from the web interface (Login Page) of the vulnerable targeted system.
Published: 2024-01-17T07:25:01.406Z
Updated: 2024-11-13T19:38:15.500Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-51739 vulnerable 2026-06-08 06:17:53.818673 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-51738 vulnerable 2026-06-08 06:17:53.817569 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-51737 vulnerable 2026-06-08 06:17:53.817150 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-51736 vulnerable 2026-06-08 06:17:53.816570 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-51735 vulnerable 2026-06-08 06:17:53.815918 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-51734 vulnerable 2026-06-08 06:17:53.815207 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-51733 vulnerable 2026-06-08 06:17:53.814451 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-51732 vulnerable 2026-06-08 06:17:53.813892 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-51731 vulnerable 2026-06-08 06:17:53.813365 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-51730 vulnerable 2026-06-08 06:17:53.812756 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-51729 vulnerable 2026-06-08 06:17:53.812085 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-51728 vulnerable 2026-06-08 06:17:53.811568 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-51727 vulnerable 2026-06-08 06:17:53.811032 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-51726 vulnerable 2026-06-08 06:17:53.810368 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-51725 vulnerable 2026-06-08 06:17:53.809816 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-51724 vulnerable 2026-06-08 06:17:53.809139 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-51723 vulnerable 2026-06-08 06:17:53.808700 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-51722 vulnerable 2026-06-08 06:17:53.808054 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-51721 vulnerable 2026-06-08 06:17:53.807290 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-51720 vulnerable 2026-06-08 06:17:53.806836 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-51719 vulnerable 2026-06-08 06:17:53.805551 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.