Approved changes feed: RSS · Atom

cpe:2.3:h:sagemcom:f\@st_3686:v2:*:*:*:*:*:*:*

part: h version: v2 update: *

VendorSagemcom (ca63bf42-83b0-5dd7-b90c-7b2c5a930f21)
ProductF@St 3686 (b4ca1333-66a6-5da1-b7c7-9d30b0cbebae)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-1623 not_vulnerable 2026-06-08 06:27:13.787299 Insufficient session timeout vulnerability in Sagemcom router
HIGH (7.7)
Insufficient session timeout vulnerability in the FAST3686 V2 Vodafone router from Sagemcom. This vulnerability could allow a local attacker to access the administration panel without requiring login credentials. This vulnerability is possible because the 'Login.asp and logout.asp' files do not handle session details correctly.
Published: 2024-03-14T12:47:40.629Z
Updated: 2024-08-28T18:19:52.425Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-3304 not_vulnerable 2026-06-08 05:33:51.139190 Details available
Sagemcom F@ST 3686 v2 3.495 devices have a buffer overflow via a long sessionKey to the goform/login URI.
Published: 2021-01-26T06:05:15.000Z
Updated: 2024-08-03T16:53:16.567Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.