Eth Imc408M
Approved changes feed: RSS · Atom
cpe:2.3:h:hereta:eth-imc408m:-:*:*:*:*:*:*:*
part: h version: - update: *
| Vendor | Hereta (d5b6e34f-3538-57ce-91a1-5f51712e09cb) |
|---|---|
| Product | Eth Imc408M (362b26d6-2f14-55eb-b1b2-d340c348a7e6) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-29521 |
not_vulnerable | 2026-06-08 07:55:16.247357 | db.gcve.eu details are currently unavailable. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-29520 |
not_vulnerable | 2026-06-08 07:55:16.246823 |
Hereta ETH-IMC408M Reflected XSS via ping_ipaddr Parameter
MEDIUM (6.1)
Hereta ETH-IMC408M firmware version 1.0.15 and prior contain a reflected cross-site scripting vulnerability in the Network Diagnosis ping function that allows attackers to execute arbitrary JavaScript. Attackers can craft malicious links with injected script payloads in the ping_ipaddr parameter to compromise authenticated administrator sessions when the links are visited.
Published: 2026-03-16T16:55:52.660Z
Updated: 2026-03-17T15:29:29.391Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-29513 |
not_vulnerable | 2026-06-08 07:55:16.238117 |
Hereta ETH-IMC408M Stored XSS via Device Location
MEDIUM (5.4)
Hereta ETH-IMC408M firmware version 1.0.15 and prior contain a stored cross-site scripting vulnerability that allows authenticated attackers to inject arbitrary JavaScript by manipulating the Device Location field. Attackers can inject malicious scripts through the System Status interface that execute in browsers of users viewing the status page without input sanitation.
Published: 2026-03-16T16:56:06.732Z
Updated: 2026-03-17T15:29:07.351Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-29510 |
not_vulnerable | 2026-06-08 07:55:16.237426 |
Hereta ETH-IMC408M Stored XSS via Device Name
MEDIUM (5.4)
Hereta ETH-IMC408M firmware version 1.0.15 and prior contain a stored cross-site scripting vulnerability that allows authenticated attackers to inject arbitrary JavaScript by manipulating the Device Name field. Attackers can inject malicious scripts through the System Status interface that execute in browsers of users viewing the status page without input sanitation.
Published: 2026-03-16T16:56:21.182Z
Updated: 2026-03-17T15:28:52.668Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.