10G08 0800Gsm Firmware

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:o:binardat:10g08-0800gsm_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorBinardat (9a2e703c-50e0-54aa-9540-70d8ae6fa9fe)
Product10G08 0800Gsm Firmware (748f7bad-85fc-588b-b304-e49f2d32c104)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-27521 vulnerable 2026-06-08 07:53:22.413749 Binardat 10G08-0800GSM Network Switch Missing Login Rate Limiting
HIGH (7.5)
Binardat 10G08-0800GSM network switch firmware version V300SP10260209 and prior do not implement rate limiting or account lockout on failed login attempts, enabling brute-force attacks against user credentials.
Published: 2026-02-24T15:08:14.170Z
Updated: 2026-03-02T14:49:41.824Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-27520 vulnerable 2026-06-08 07:53:22.413355 Binardat 10G08-0800GSM Network Switch Base64-encoded Password Stored in Cookie
HIGH (7.5)
Binardat 10G08-0800GSM network switch firmware versions prior to V300SP10260209 store a user password in a client-side cookie as a Base64-encoded value accessible via the web interface. Because Base64 is reversible and provides no confidentiality, an attacker who can access the cookie value can recover the plaintext password.
Published: 2026-02-24T15:07:41.085Z
Updated: 2026-02-26T21:28:10.307Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-27519 vulnerable 2026-06-08 07:53:22.408526 Binardat 10G08-0800GSM Network Switch Hard-coded RC4 Encryption Key
HIGH (7.5)
Binardat 10G08-0800GSM network switch firmware version V300SP10260209 and prior use RC4 with a hard-coded key embedded in client-side JavaScript. Because the key is static and exposed, an attacker can decrypt protected values and defeat confidentiality protections.
Published: 2026-02-24T15:07:10.410Z
Updated: 2026-02-27T16:27:19.626Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-27518 vulnerable 2026-06-08 07:53:22.408136 Binardat 10G08-0800GSM Network Switch CSRF
MEDIUM (4.3)
Binardat 10G08-0800GSM network switch firmware version V300SP10260209 and prior lack CSRF protections for state-changing actions in the administrative interface. An attacker can trick an authenticated administrator into performing unauthorized configuration changes.
Published: 2026-02-24T15:06:39.513Z
Updated: 2026-02-27T16:27:58.158Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-27517 vulnerable 2026-06-08 07:53:22.407756 Binardat 10G08-0800GSM Network Switch XSS
MEDIUM (6.1)
Binardat 10G08-0800GSM network switch firmware version V300SP10260209 and prior reflect unsanitized user input in the web interface, allowing an attacker to inject and execute arbitrary JavaScript in the context of an authenticated user.
Published: 2026-02-24T15:06:08.974Z
Updated: 2026-03-02T14:49:41.663Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-27516 vulnerable 2026-06-08 07:53:22.407137 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-27515 vulnerable 2026-06-08 07:53:22.406501 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-27507 vulnerable 2026-06-08 07:53:22.391374 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-23678 vulnerable 2026-06-08 07:51:15.964224 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.