Approved changes feed: RSS · Atom

cpe:2.3:a:welotec:tk515l-w_set:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorWelotec (c86a2534-c80d-51ac-bf3c-f772404a4820)
ProductTk515L W Set (7c4e5408-4f49-5c89-b8ab-53f889752912)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-1083 vulnerable 2026-06-03 14:48:53.688838 Welotec: improper access control in TK500v1 router series
CRITICAL (9.8)
An unauthenticated remote attacker who is aware of a MQTT topic name can send and receive messages, including GET/SET configuration commands, reboot commands and firmware updates.
Published: 2024-04-09T08:25:46.915Z
Updated: 2024-10-02T05:26:02.183Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-1082 vulnerable 2026-06-03 14:48:53.681746 Welotec: Command injection vulnerability in TK500v1 router series
HIGH (8.8)
An remote attacker with low privileges can perform a command injection which can lead to root access.
Published: 2024-04-09T08:25:34.716Z
Updated: 2024-08-21T14:01:54.372Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.