Approved changes feed: RSS · Atom

cpe:2.3:a:billion_electric:m150:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorBillion Electric (90ee0f44-bc2b-5fe8-b687-de1352502702)
ProductM150 (24dcef77-9bac-5ed4-b6f7-c0baa95e5f26)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-1143 vulnerable 2026-06-08 07:06:37.028710 Billion Electric M120N - Use of Hard-coded Credentials
HIGH (8.4)
Certain models of routers from Billion Electric has hard-coded embedded linux credentials, allowing attackers to log in through the SSH service using these credentials and obtain root privilege of the system.
Published: 2025-02-11T03:17:22.510Z
Updated: 2025-02-18T18:00:30.733Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-11983 vulnerable 2026-06-08 06:23:50.808124 Billion Electric router - OS Command Injection
HIGH (7.2)
Certain models of routers from Billion Electric has an OS Command Injection vulnerability, allowing remote attackers with administrator privileges to inject arbitrary system commands into a specific SSH function and execute them on the device.
Published: 2024-11-29T06:57:24.047Z
Updated: 2024-11-29T14:10:39.561Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-11982 vulnerable 2026-06-08 06:23:50.807247 Billion Electric router - Plaintext Storage of a Password
HIGH (7.2)
Certain models of routers from Billion Electric has a Plaintext Storage of a Password vulnerability. Remote attackers with administrator privileges can access the user settings page to retrieve plaintext passwords.
Published: 2024-11-29T06:45:33.819Z
Updated: 2024-11-29T14:22:56.724Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-11981 vulnerable 2026-06-08 06:23:50.806460 Billion Electric router - Authentication Bypass
HIGH (7.5)
Certain models of routers from Billion Electric has an Authentication Bypass vulnerability, allowing unautheticated attackers to retrive contents of arbitrary web pages.
Published: 2024-11-29T06:21:31.476Z
Updated: 2024-11-29T14:31:52.528Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-11980 vulnerable 2026-06-08 06:23:50.803103 Billion Electric router - Missing Authentication
HIGH (8.6)
Certain modes of routers from Billion Electric have a Missing Authentication vulnerability, allowing unauthenticated remote attackers to directly access the specific functionality to obtain partial device information, modify the WiFi SSID, and restart the device.
Published: 2024-11-29T06:03:04.983Z
Updated: 2024-11-29T14:40:54.541Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.