OptilinkNetwork OP-XT71000n Firmware 3.3.1-191028
Approved changes feed: RSS · Atom
cpe:2.3:o:optilinknetwork:op-xt71000n_firmware:3.3.1-191028:*:*:*:*:*:*:*
part: o version: 3.3.1-191028 update: *
| Vendor | Optilinknetwork (42e4dddf-17c3-5879-970e-68657c712041) |
|---|---|
| Product | Op Xt71000N Firmware (ef92c65c-2a30-511c-9526-60b482e0f748) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-23593 |
vulnerable | 2026-06-08 05:22:31.994728 |
Details available
A vulnerability in OPTILINK OP-XT71000N Hardware Version: V2.2, Firmware Version: OP_V3.3.1-191028 allows an unauthenticated, remote attacker to conduct a cross site request forgery (CSRF) attack to enable syslog mode through ' /mgm_log_cfg.asp.' The system starts to log events, 'Remote' mode or 'Both' mode on "Syslog -- Configuration page" logs events and sends to remote syslog server IP and Port.
Published: 2022-11-23T00:00:00.000Z
Updated: 2025-04-29T16:02:29.041Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-23592 |
vulnerable | 2026-06-08 05:22:31.994182 |
Details available
A vulnerability in OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OP_V3.3.1-191028 allows an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack to Reset ONU to Factory Default through ' /mgm_dev_reset.asp.' Resetting to default leads to Escalation of Privileges by logging-in with default credentials.
Published: 2022-11-23T00:00:00.000Z
Updated: 2025-04-29T15:56:45.921Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-23591 |
vulnerable | 2026-06-08 05:22:31.993630 |
Details available
A vulnerability in OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OP_V3.3.1-191028 allows an attacker to upload arbitrary files through " /mgm_dev_upgrade.asp " which can "delete every file for Denial of Service (using 'rm -rf *.*' in the code), reverse connection (using '.asp' webshell), backdoor.
Published: 2022-11-23T00:00:00.000Z
Updated: 2025-04-29T15:57:51.319Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-23590 |
vulnerable | 2026-06-08 05:22:31.992962 |
Details available
A vulnerability in Optilink OP-XT71000N Hardware version: V2.2 , Firmware Version: OP_V3.3.1-191028 allows an unauthenticated remote attacker to conduct a cross-site request forgery (CSRF) attack to change the Password for "WLAN SSID" through "wlwpa.asp".
Published: 2022-11-23T00:00:00.000Z
Updated: 2025-04-29T15:58:53.542Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-23589 |
vulnerable | 2026-06-08 05:22:31.992599 |
Details available
A vulnerability in OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OP_V3.3.1-191028 allows an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack to cause a Denial of Service by Rebooting the router through " /mgm_dev_reboot.asp."
Published: 2022-11-23T00:00:00.000Z
Updated: 2025-04-29T15:59:56.213Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-23588 |
vulnerable | 2026-06-08 05:22:31.992115 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-23587 |
vulnerable | 2026-06-08 05:22:31.991535 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-23586 |
vulnerable | 2026-06-08 05:22:31.991043 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-23585 |
vulnerable | 2026-06-08 05:22:31.990494 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-23584 |
vulnerable | 2026-06-08 05:22:31.990003 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-23583 |
vulnerable | 2026-06-08 05:22:31.989418 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-23582 |
vulnerable | 2026-06-08 05:22:31.986767 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.