Approved changes feed: RSS · Atom
cpe:2.3:h:axesstel:mv_410r:*:*:*:*:*:*:*:*
part: h version: * update: *
| Vendor | Axesstel (2bec099e-04f9-593e-b532-63e30d3e6791) |
|---|---|
| Product | Mv 410R (56248e23-f3f9-5751-869d-41aab773df53) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2009-2323 |
vulnerable | 2026-06-08 04:51:27.781140 |
Details available
The web interface on the Axesstel MV 410R redirects users back to the referring page after execution of some CGI scripts, which makes it easier for remote attackers to avoid detection of cross-site request forgery (CSRF) attacks, as demonstrated by a redirect from the cgi-bin/wireless.cgi script.
Published: 2009-07-05T16:00:00.000Z
Updated: 2024-08-07T05:44:55.936Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-2322 |
vulnerable | 2026-06-08 04:51:27.780885 |
Details available
Cross-site scripting (XSS) vulnerability in cgi-bin/sysconf.cgi on the Axesstel MV 410R allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Published: 2009-07-05T16:00:00.000Z
Updated: 2024-08-07T05:44:56.036Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-2321 |
vulnerable | 2026-06-08 04:51:27.780621 |
Details available
cgi-bin/sysconf.cgi on the Axesstel MV 410R allows remote attackers to cause a denial of service (configuration reset) via a RESTORE=RESTORE query string.
Published: 2009-07-05T16:00:00.000Z
Updated: 2024-08-07T05:44:55.941Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-2320 |
vulnerable | 2026-06-08 04:51:27.780343 |
Details available
The web interface on the Axesstel MV 410R relies on client-side JavaScript code to validate input, which allows remote attackers to send crafted data, and possibly have unspecified other impact, via a client that does not process JavaScript.
Published: 2009-07-05T16:00:00.000Z
Updated: 2024-08-07T05:44:55.942Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-2319 |
vulnerable | 2026-06-08 04:51:27.780071 |
Details available
The default configuration of the Wi-Fi component on the Axesstel MV 410R does not use encryption, which makes it easier for remote attackers to obtain sensitive information by sniffing the network.
Published: 2009-07-05T16:00:00.000Z
Updated: 2024-08-07T05:44:55.953Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-2318 |
vulnerable | 2026-06-08 04:51:27.779795 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-2317 |
vulnerable | 2026-06-08 04:51:27.779429 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.