Approved changes feed: RSS · Atom

cpe:2.3:a:hathway:skyworth_router_cm5100:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorHathway (44d5696f-21bd-5334-93a5-43484e3f1c32)
ProductSkyworth Router Cm5100 (9955aac6-bb18-5c0e-9cef-9fc2c7efcdbf)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-51743 vulnerable 2026-06-08 06:17:53.820724 Buffer Overflow vulnerability in Skyworth Router
MEDIUM (6.5)
This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the Set Upstream Channel ID (UCID) parameter at its web interface. A remote attacker could exploit this vulnerability by supplying specially crafted input to the parameter at the web interface of the vulnerable targeted system. Successful exploitation of this vulnerability could allow the attacker to perform a Denial of Service (DoS) attack on the targeted system.
Published: 2024-01-17T08:00:11.223Z
Updated: 2025-06-17T21:19:18.666Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-51742 vulnerable 2026-06-08 06:17:53.820180 Buffer Overflow vulnerability in Skyworth Router
MEDIUM (6.5)
This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the Add Downstream Frequency parameter at its web interface. A remote attacker could exploit this vulnerability by supplying specially crafted input to the parameter at the web interface of the vulnerable targeted system. Successful exploitation of this vulnerability could allow the attacker to perform a Denial of Service (DoS) attack on the targeted system.
Published: 2024-01-17T07:57:14.510Z
Updated: 2025-06-17T21:19:18.535Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-51741 vulnerable 2026-06-08 06:17:53.819757 Cleartext Submission of Password vulnerability in Skyworth Router
HIGH (7.5)
This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to transmission of authentication credentials in plaintext over the network. A remote attacker could exploit this vulnerability by eavesdropping on the victim’s network traffic to extract username and password from the web interface (Password Reset Page) of the vulnerable targeted system.
Published: 2024-01-17T07:26:46.152Z
Updated: 2025-06-17T21:19:18.410Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-51740 vulnerable 2026-06-08 06:17:53.819313 Cleartext Submission of Password vulnerability in Skyworth Router
HIGH (7.5)
This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to transmission of authentication credentials in plaintext over the network. A remote attacker could exploit this vulnerability by eavesdropping on the victim’s network traffic to extract username and password from the web interface (Login Page) of the vulnerable targeted system.
Published: 2024-01-17T07:25:01.406Z
Updated: 2024-11-13T19:38:15.500Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-51739 vulnerable 2026-06-08 06:17:53.818553 Stored Cross Site Scripting Vulnerability in Skyworth Router
MEDIUM (6.9)
This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the Device Name parameter at its web interface. A remote attacker could exploit this vulnerability by supplying specially crafted input to the parameter at the web interface of the vulnerable targeted system. Successful exploitation of this vulnerability could allow the attacker to perform stored XSS attacks on the targeted system.
Published: 2024-01-17T07:20:42.601Z
Updated: 2025-06-02T15:05:52.233Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-51738 vulnerable 2026-06-08 06:17:53.817540 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-51737 vulnerable 2026-06-08 06:17:53.816967 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-51736 vulnerable 2026-06-08 06:17:53.816418 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-51735 vulnerable 2026-06-08 06:17:53.815747 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-51734 vulnerable 2026-06-08 06:17:53.815086 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-51733 vulnerable 2026-06-08 06:17:53.814416 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-51732 vulnerable 2026-06-08 06:17:53.813859 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-51731 vulnerable 2026-06-08 06:17:53.813333 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-51730 vulnerable 2026-06-08 06:17:53.812495 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-51729 vulnerable 2026-06-08 06:17:53.811950 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-51728 vulnerable 2026-06-08 06:17:53.811536 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-51727 vulnerable 2026-06-08 06:17:53.810886 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-51726 vulnerable 2026-06-08 06:17:53.810209 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-51725 vulnerable 2026-06-08 06:17:53.809781 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-51724 vulnerable 2026-06-08 06:17:53.809105 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-51723 vulnerable 2026-06-08 06:17:53.808532 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-51722 vulnerable 2026-06-08 06:17:53.807926 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-51721 vulnerable 2026-06-08 06:17:53.807257 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-51720 vulnerable 2026-06-08 06:17:53.806787 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-51719 vulnerable 2026-06-08 06:17:53.804364 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.