Approved changes feed: RSS · Atom

cpe:2.3:h:patlite:nhl-3fb1:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorPatlite (ac3e79b7-ed70-5be9-b60c-18128b12cf15)
ProductNhl 3Fb1 (deda5792-19f7-5ce5-aca4-2195ac1e5ed0)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-38625 not_vulnerable 2026-06-08 05:47:16.715663 Details available
Patlite NH-FB v1.46 and below was discovered to contain insufficient firmware validation during the upgrade firmware file upload process. This vulnerability allows authenticated attackers to create and upload their own custom-built firmware and inject malicious code. NOTE: the vendor's position is that this is a design choice, not a vulnerability
Published: 2022-08-29T22:46:15.000Z
Updated: 2024-08-03T11:02:14.270Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-18473 not_vulnerable 2026-06-08 05:11:14.035971 Details available
A hidden backdoor on PATLITE NH-FB Series devices with firmware version 1.45 or earlier, NH-FV Series devices with firmware version 1.10 or earlier, and NBM Series devices with firmware version 1.09 or earlier allow attackers to enable an SSH daemon via the "kankichi" or "kamiyo4" password to the _secret1.htm URI. Subsequently, the default password of root for the root account allows an attacker to conduct remote code execution and as a result take over the system.
Published: 2019-03-19T22:19:42.000Z
Updated: 2024-08-05T11:08:21.886Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.