Furuno Felcom 250 Firmware
Approved changes feed: RSS · Atom
cpe:2.3:o:furuno:felcom_250_firmware:-:*:*:*:*:*:*:*
part: o version: - update: *
| Vendor | Furuno (ab8ad68c-649e-576f-b8c1-8c2e0fcad3bc) |
|---|---|
| Product | Felcom 250 Firmware (cb7b2687-f521-587b-9e70-c6b338e5c326) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2018-16705 |
vulnerable | 2026-06-08 05:11:05.335047 |
Details available
FURUNO FELCOM 250 and 500 devices allow unauthenticated access to the xml/permission.xml file containing all of the system's usernames and passwords. This includes the Admin and Service user accounts and their unsalted MD5 hashes, as well as the SMS server password in cleartext.
Published: 2018-09-10T17:00:00.000Z
Updated: 2024-08-05T10:32:53.777Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-16591 |
vulnerable | 2026-06-08 05:11:05.130856 |
Details available
FURUNO FELCOM 250 and 500 devices allow unauthenticated users to change the password for the Admin, Log and Service accounts, as well as the password for the protected "SMS" panel via /cgi-bin/sm_changepassword.cgi and /cgi-bin/sm_sms_changepasswd.cgi.
Published: 2018-09-10T17:00:00.000Z
Updated: 2024-08-05T10:24:33.002Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-16590 |
vulnerable | 2026-06-08 05:11:05.128667 |
Details available
FURUNO FELCOM 250 and 500 devices use only client-side JavaScript in login.js for authentication.
Published: 2018-09-06T23:00:00.000Z
Updated: 2024-08-05T10:24:32.987Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.