Approved changes feed: RSS · Atom

cpe:2.3:o:trivum:c4_professional_firmware:8.76:*:*:*:*:*:*:*

part: o version: 8.76 update: *

VendorTrivum (87a1526a-29e2-5030-be9b-5fecce65f46f)
ProductC4 Professional Firmware (94757358-875f-5e37-a8b8-41e602cb7ad1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-13860 vulnerable 2026-06-08 05:10:52.027885 Details available
MusicCenter / Trivum Multiroom Setup Tool V8.76 - SNR 8604.26 - C4 Professional before V9.34 build 13381 - 12.07.18 allows unauthorized remote attackers to obtain sensitive information via the "/xml/menu/getObjectEditor.xml" URL, using a "?oid=systemSetup&id=_0" or "?oid=systemUsers&id=_0" GET request.
Published: 2018-07-17T14:00:00.000Z
Updated: 2024-08-05T09:14:47.333Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-13859 vulnerable 2026-06-08 05:10:52.027419 Details available
MusicCenter / Trivum Multiroom Setup Tool V8.76 - SNR 8604.26 - C4 Professional before V9.34 build 13381 - 12.07.18, allow unauthorized remote attackers to reset the authentication via the "/xml/system/setAttribute.xml" URL, using the GET request "?id=0&attr=protectAccess&newValue=0" (a successful attack will allow attackers to login without authorization).
Published: 2018-07-17T14:00:00.000Z
Updated: 2024-08-05T09:14:47.231Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-13858 vulnerable 2026-06-08 05:10:52.026249 Details available
MusicCenter / Trivum Multiroom Setup Tool V8.76 - SNR 8604.26 - C4 Professional allows unauthorized remote attackers to reboot or execute other functions via the "/xml/system/control.xml" URL, using the GET request "?action=reboot" for example.
Published: 2018-07-17T14:00:00.000Z
Updated: 2024-08-05T09:14:47.192Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.