Openbk7231T App
Approved changes feed: RSS · Atom
cpe:2.3:a:openshwprojects:openbk7231t_app:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Openshwprojects (07ba1e3e-6d32-52e6-b375-767ce3c06210) |
|---|---|
| Product | Openbk7231T App (d4d58a20-2ef2-58fe-9296-6a1e5d332a83) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-71273 |
vulnerable | 2026-09-16 04:32:59.672790 |
OpenBK7231T CSRF in /cfg_wifi_set Leading to Implicit Web Password Disable and WiFi Hijack
MEDIUM (6.5)
OpenBK7231T's /cfg_wifi_set endpoint (src/httpserver/http_fns.c) accepts configuration changes via a plain GET request with no CSRF token. If the parameter is absent from the request, an else-branch silently clears the device's web admin password to an empty string.
Published: 2026-08-05T12:26:20.275Z
Updated: 2026-08-10T11:46:50.240Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-71275 |
vulnerable | 2026-09-16 04:32:59.394576 |
OpenBK7231T - Reflected XSS via OTA host Parameter
MEDIUM (5.4)
OpenBK7231T's http_fn_ota_exec() (src/httpserver/http_fns.c) reflects the `host` query parameter directly into an HTML response via hprintf255(request, "<h3>OTA requested for %s!</h3>", tmpA) with no HTML encoding, allowing a crafted URL such as /ota_exec?host=<script>alert(1)</script> to execute JavaScript in an authenticated admin's browser when they click a malicious link.
Published: 2026-08-05T12:26:22.074Z
Updated: 2026-08-10T11:31:41.795Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-71274 |
vulnerable | 2026-09-16 04:32:59.039667 |
OpenBK7231T Stored XSS via Unsanitized MQTT-Set Channel Labels
HIGH (8.5)
OpenBK7231T's CHANNEL_SetLabel (src/cmnds/cmd_channels.c) stores channel labels received via the MQTT SetChannelLabel command using strdup with no HTML sanitization. CHANNEL_GetLabel returns these labels unsanitized, and they are rendered via hprintf255 at 15+ locations in src/httpserver/http_fns.c with no HTML encoding.
Published: 2026-08-05T12:26:21.160Z
Updated: 2026-08-10T11:46:52.287Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.