SAET TEBE Small Firmware 05.01 1137
Approved changes feed: RSS · Atom
cpe:2.3:o:saet:tebe_small_firmware:05.01:1137:*:*:*:*:*:*
part: o version: 05.01 update: 1137
| Vendor | Saet (25c0b5eb-d085-5288-b793-bc16ec94dc4b) |
|---|---|
| Product | Tebe Small Firmware (044184fc-1369-5875-87bf-ce5a6a5d318a) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2019-9106 |
vulnerable | 2026-06-08 05:14:25.001054 |
Details available
The WebApp v04.68 in the supervisor on SAET Impianti Speciali TEBE Small 05.01 build 1137 devices allows remote attackers to execute or include local .php files, as demonstrated by menu=php://filter/convert.base64-encode/resource=index.php to read index.php.
Published: 2019-05-31T21:22:41.000Z
Updated: 2024-08-04T21:38:46.400Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-9105 |
vulnerable | 2026-06-08 05:14:24.998980 |
Details available
The WebApp v04.68 in the supervisor on SAET Impianti Speciali TEBE Small 05.01 build 1137 devices allows remote attackers to make several types of API calls without authentication, as demonstrated by retrieving password hashes via an inc/utils/REST_API.php?command=CallAPI&customurl=alladminusers call.
Published: 2019-05-31T21:21:15.000Z
Updated: 2024-08-04T21:38:46.370Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.