Remote Access Server Firmware
Approved changes feed: RSS · Atom
cpe:2.3:o:etictelecom:remote_access_server_firmware:*:*:*:*:*:*:*:*
part: o version: * update: *
| Vendor | Etictelecom (7fab253d-0f30-54bf-bf41-9c0e5964106a) |
|---|---|
| Product | Remote Access Server Firmware (c4a011e3-f17c-53aa-9448-43c28af110c5) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-26157 |
vulnerable | 2026-06-08 06:31:24.916220 |
ETIC Telecom Remote Access Server (RAS) Cross-site Scripting
MEDIUM (6.1)
All versions of ETIC Telecom Remote Access Server (RAS) prior to 4.5.0
are vulnerable to reflected cross site scripting (XSS) attacks in get
view method under view parameter. The ETIC RAS web server uses dynamic
pages that get their input from the client side and reflect the input in
their response to the client.
Published: 2025-01-17T16:14:43.418Z
Updated: 2025-01-21T15:04:39.958Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-26156 |
vulnerable | 2026-06-08 06:31:24.915704 |
ETIC Telecom Remote Access Server (RAS) Cross-site Scripting
MEDIUM (4.8)
All versions of ETIC Telecom Remote Access Server (RAS) prior to 4.5.0
are vulnerable to reflected cross site scripting (XSS) attacks in the
method parameter. The ETIC RAS web server uses dynamic pages that gets
their input from the client side and reflects the input in its response
to the client.
Published: 2025-01-17T16:12:26.288Z
Updated: 2025-01-21T15:05:56.805Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-26155 |
vulnerable | 2026-06-08 06:31:24.915130 |
ETIC Telecom Remote Access Server (RAS) Cleartext Transmission of Sensitive Information
MEDIUM (6.8)
All versions of ETIC Telecom Remote Access Server (RAS) prior to 4.5.0
expose clear text credentials in the web portal. An attacker can access
the ETIC RAS web portal and view the HTML code, which is configured to
be hidden, thus allowing a connection to the ETIC RAS ssh server, which
could enable an attacker to perform actions on the device.
Published: 2025-01-17T16:19:37.430Z
Updated: 2025-01-21T14:55:29.814Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-26154 |
vulnerable | 2026-06-08 06:31:24.914536 |
ETIC Telecom Remote Access Server (RAS) Cross-site Scripting
MEDIUM (4.8)
All versions of ETIC Telecom Remote Access Server (RAS) prior to 4.5.0
are vulnerable to reflected cross site scripting in the appliance site
name. The ETIC RAS web server saves the site name and then presents it
to the administrators in a few different pages.
Published: 2025-01-17T16:17:10.899Z
Updated: 2025-01-21T14:56:13.407Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-26153 |
vulnerable | 2026-06-08 06:31:24.914054 |
ETIC Telecom Remote Access Server (RAS) Cross-Site Request Forgery
HIGH (7.4)
All versions of ETIC Telecom Remote Access Server (RAS) prior to 4.9.19
are vulnerable to cross-site request forgery (CSRF). An external
attacker with no access to the device can force the end user into
submitting a "setconf" method request, not requiring any CSRF token,
which can lead into denial of service on the device.
Published: 2025-01-17T16:23:10.357Z
Updated: 2025-01-21T14:45:48.666Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-3453 |
vulnerable | 2026-06-08 06:09:39.602852 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-41607 |
vulnerable | 2026-06-08 05:48:30.600531 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-40981 |
vulnerable | 2026-06-08 05:48:28.507294 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-3703 |
vulnerable | 2026-06-08 05:48:21.703964 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.