Approved changes feed: RSS · Atom

cpe:2.3:h:saet:tebe_small:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorSaet (25c0b5eb-d085-5288-b793-bc16ec94dc4b)
ProductTebe Small (fd80e07c-e0f7-5834-8b1c-74a0f1cc1a7d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-9106 not_vulnerable 2026-06-08 05:14:25.001180 Details available
The WebApp v04.68 in the supervisor on SAET Impianti Speciali TEBE Small 05.01 build 1137 devices allows remote attackers to execute or include local .php files, as demonstrated by menu=php://filter/convert.base64-encode/resource=index.php to read index.php.
Published: 2019-05-31T21:22:41.000Z
Updated: 2024-08-04T21:38:46.400Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-9105 not_vulnerable 2026-06-08 05:14:24.999829 Details available
The WebApp v04.68 in the supervisor on SAET Impianti Speciali TEBE Small 05.01 build 1137 devices allows remote attackers to make several types of API calls without authentication, as demonstrated by retrieving password hashes via an inc/utils/REST_API.php?command=CallAPI&customurl=alladminusers call.
Published: 2019-05-31T21:21:15.000Z
Updated: 2024-08-04T21:38:46.370Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.