Orange AirBox Firmware Y858_FL_01.16 04

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:o:orange:airbox_firmware:y858_fl_01.16_04:*:*:*:*:*:*:*

part: o version: y858_fl_01.16_04 update: *

VendorOrange (ba826d51-0d52-53db-b67e-05a70f7fb800)
ProductAirbox Firmware (f5d35c0e-20c6-541d-9472-a5fe1331b06e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-18377 vulnerable 2026-06-08 05:11:13.898789 Details available
goform/setReset on Orange AirBox Y858_FL_01.16_04 devices allows attackers to reset a router to factory settings, which can be used to login using the default admin:admin credentials.
Published: 2018-10-16T01:00:00.000Z
Updated: 2024-09-16T19:51:51.006Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-18376 vulnerable 2026-06-08 05:11:13.898357 Details available
goform/getWlanClientInfo in Orange AirBox Y858_FL_01.16_04 allows remote attackers to discover information about currently connected devices (hostnames, IP addresses, MAC addresses, and connection time) via the rand parameter.
Published: 2018-10-16T01:00:00.000Z
Updated: 2024-09-16T19:46:10.083Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-18375 vulnerable 2026-06-08 05:11:13.897260 Details available
goform/getProfileList in Orange AirBox Y858_FL_01.16_04 allows attackers to extract APN data (name, number, username, and password) via the rand parameter.
Published: 2018-10-16T01:00:00.000Z
Updated: 2024-09-16T18:56:07.197Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.