Approved changes feed: RSS · Atom

cpe:2.3:h:comfast:cf-n1:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorComfast (73ca0fe3-d078-57b1-947c-03e714d28b3e)
ProductCf N1 (1e5d48b5-0031-505b-bde9-96985122396d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-9582 not_vulnerable 2026-06-03 15:13:46.830612 Comfast CF-N1 webmgnt ntp_timezone command injection
MEDIUM (6.3)
A flaw has been found in Comfast CF-N1 2.6.0. Affected is the function ntp_timezone of the file /usr/bin/webmgnt. Executing manipulation of the argument timestr can lead to command injection. The attack may be launched remotely. The exploit has been published and may be used.
Published: 2025-08-28T19:32:07.054Z
Updated: 2025-08-28T20:04:06.709Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-9581 not_vulnerable 2026-06-03 15:13:46.829989 Comfast CF-N1 webmgnt multi_pppoe command injection
MEDIUM (6.3)
A vulnerability was detected in Comfast CF-N1 2.6.0. This impacts the function multi_pppoe of the file /usr/bin/webmgnt. Performing manipulation of the argument phy_interface results in command injection. The attack may be initiated remotely. The exploit is now public and may be used.
Published: 2025-08-28T19:02:10.432Z
Updated: 2025-08-28T20:01:08.768Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.