Approved changes feed: RSS · Atom

cpe:2.3:o:systrome:cumilon_isg-800w_firmware:1.1-r2.1:*:*:*:*:*:*:*

part: o version: 1.1-r2.1 update: *

VendorSystrome (b8b033f6-754f-592c-b837-c2664c492edd)
ProductCumilon Isg 800W Firmware (1a8ba05a-edd6-5fb3-a5f9-4d390851a1a2)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-7383 vulnerable 2026-06-08 05:14:14.367939 Details available
An issue was discovered on Systrome Cumilon ISG-600C, ISG-600H, and ISG-800W devices with firmware V1.1-R2.1_TRUNK-20181105.bin. A shell command injection occurs by editing the description of an ISP file. The file network/isp/isp_update_edit.php does not properly validate user input, which leads to shell command injection via the des parameter.
Published: 2019-03-17T19:04:54.000Z
Updated: 2024-08-04T20:46:46.242Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-19525 vulnerable 2026-06-08 05:11:15.841164 Details available
An issue was discovered on Systrome ISG-600C, ISG-600H, and ISG-800W 1.1-R2.1_TRUNK-20180914.bin devices. There is CSRF via /ui/?g=obj_keywords_add and /ui/?g=obj_keywords_addsave with resultant XSS because of a lack of csrf token validation.
Published: 2019-03-17T18:43:37.000Z
Updated: 2024-08-05T11:37:11.532Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.