Approved changes feed: RSS · Atom

cpe:2.3:o:beeline:smart_box_firmware:2.0.38:*:*:*:*:*:*:*

part: o version: 2.0.38 update: *

VendorBeeline (7c67a2de-b519-5339-a878-d2079789ed70)
ProductSmart Box Firmware (58605837-443a-5877-807c-c6b49e23edeb)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-41427 vulnerable 2026-06-08 05:35:20.519231 Details available
Beeline Smart Box 2.0.38 is vulnerable to Cross Site Scripting (XSS) via the choose_mac parameter to setup.cgi.
Published: 2021-11-10T15:38:26.000Z
Updated: 2024-08-04T03:15:27.307Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-41426 vulnerable 2026-06-08 05:35:20.518032 Details available
Beeline Smart box 2.0.38 is vulnerable to Cross Site Request Forgery (CSRF) via mgt_end_user.htm.
Published: 2021-11-10T15:43:18.000Z
Updated: 2024-08-04T03:15:27.277Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-12246 vulnerable 2026-06-08 05:17:56.737790 Details available
Beeline Smart Box 2.0.38 routers allow "Advanced settings > Other > Diagnostics" OS command injection via the Ping ping_ipaddr parameter, the Nslookup nslookup_ipaddr parameter, or the Traceroute traceroute_ipaddr parameter.
Published: 2020-04-29T12:34:24.000Z
Updated: 2024-08-04T11:48:58.520Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.