GCVE - cpe:2.3:h:fastweb:fastgate:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:fastweb:fastgate:-:*:*:*:*:*:*:*

part: h version: - update: *

Vendor	Fastweb (`b603d8db-51d0-50a2-a266-97225abb0192`)
Product	Fastgate (`197af5ec-fa2e-52f9-8b22-08c1b08265e7`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2019-18661`	not_vulnerable	2026-06-08 05:13:12.053767	Details available Fastweb FASTGate 1.0.1b devices allow partial authentication bypass by changing a certain check_pwd return value from 0 to 1. An attack does not achieve administrative control of a device; however, the attacker can view all of the web pages of the administration console. Published: 2019-11-02T01:17:12.000Z Updated: 2024-08-05T01:54:14.585Z Open on db.gcve.eu Reference links https://angeloanatrella86.github.io/CVE-2019/ https://github.com/angeloanatrella86/CVE-2019/blob/master/index.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-6023`	not_vulnerable	2026-06-08 05:11:53.261302	Details available Fastweb FASTgate 0.00.47 devices are vulnerable to CSRF, with impacts including Wi-Fi password changing, Guest Wi-Fi activating, etc. Published: 2018-05-11T21:00:00.000Z Updated: 2024-08-05T05:54:51.314Z Open on db.gcve.eu Reference links http://packetstormsecurity.com/files/147571/Fastweb-FASTGate-0.00.47-Cross-Site-Request-Forgery.html https://www.exploit-db.com/exploits/44606/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-20122`	not_vulnerable	2026-06-08 05:11:26.680756	Details available The web interface on FASTGate Fastweb devices with firmware through 0.00.47_FW_200_Askey 2017-05-17 (software through 1.0.1b) exposed a CGI binary that is vulnerable to a command injection vulnerability that can be exploited to achieve remote code execution with root privileges. No authentication is required in order to trigger the vulnerability. Published: 2019-02-21T14:00:00.000Z Updated: 2024-08-05T11:51:19.247Z Open on db.gcve.eu Reference links http://www.horizonsecurity.it/advisories/?a=12&title=Fastweb+FastGate+router+101b+Remote+code+execution++CVE201820122	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.