Smart Modem Gen 2 (Arcadyan Lh1000)
Approved changes feed: RSS · Atom
cpe:2.3:a:telstra:smart_modem_gen_2_(arcadyan_lh1000):*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Telstra (3a466e14-6366-5134-9fd1-815ba9f50e8f) |
|---|---|
| Product | Smart Modem Gen 2 (Arcadyan Lh1000) (479110c2-1634-53cc-9de6-fb90fcb0dfb8) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-43478 |
vulnerable | 2026-06-08 06:12:31.582216 |
Unauthenticated configuration restore and firmware update
HIGH (8.8)
fake_upload.cgi on the Telstra Smart Modem Gen 2 (Arcadyan LH1000), firmware versions < 0.18.15r, allows unauthenticated attackers to upload firmware images and configuration backups, which could allow them to alter the firmware or the configuration on the device, ultimately leading to code execution as root.
Published: 2023-09-20T13:03:10.299Z
Updated: 2024-09-24T18:58:06.387Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-43477 |
vulnerable | 2026-06-08 06:12:31.580752 |
Post-Auth Command Injection in Telstra Smart Modem Gen 2 (Arcadyan LH1000)
MEDIUM (6.8)
The ping_from parameter of ping_tracerte.cgi in the web UI of Telstra Smart Modem Gen 2 (Arcadyan LH1000), firmware versions < 0.18.15r, was not properly sanitized before being used in a system call, which could allow an authenticated attacker to achieve command injection as root on the device.
Published: 2023-09-20T12:41:03.578Z
Updated: 2024-09-24T19:00:27.334Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.