GCVE - cpe:2.3:h:hot:hotbox_router:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:hot:hotbox_router:-:*:*:*:*:*:*:*

part: h version: - update: *

Vendor	Hot (`6ae42a81-3edb-5216-94b0-248618b609f0`)
Product	Hotbox Router (`8613de9d-f189-5724-9de4-9c46e2797b41`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2013-5220`	vulnerable	2026-06-08 05:04:51.102477	Details available goform/login on the HOT HOTBOX router with software 2.1.11 allows remote attackers to cause a denial of service (device crash) via crafted HTTP POST data. Published: 2013-12-30T02:00:00.000Z Updated: 2024-08-06T17:06:52.402Z Open on db.gcve.eu Reference links http://www.youtube.com/watch?v=CPlT09ZIj48 http://packetstormsecurity.com/files/123901/HOTBOX-2.1.11-CSRF-Traversal-Denial-Of-Service.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-5219`	vulnerable	2026-06-08 05:04:51.102186	Details available Directory traversal vulnerability on the HOT HOTBOX router with software 2.1.11 allows remote attackers to read arbitrary files via a .. (dot dot) in a URI, as demonstrated by a request for /etc/passwd. Published: 2013-12-30T02:00:00.000Z Updated: 2024-08-06T17:06:52.338Z Open on db.gcve.eu Reference links http://www.youtube.com/watch?v=CPlT09ZIj48 http://packetstormsecurity.com/files/123901/HOTBOX-2.1.11-CSRF-Traversal-Denial-Of-Service.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-5218`	vulnerable	2026-06-08 05:04:51.101879	Details available Cross-site scripting (XSS) vulnerability on the HOT HOTBOX router with software 2.1.11 allows remote attackers to inject arbitrary web script or HTML via a crafted DHCP Host Name option, which is not properly handled during rendering of the DHCP table in wlanAccess.asp. Published: 2013-12-30T02:00:00.000Z Updated: 2024-08-06T17:06:52.356Z Open on db.gcve.eu Reference links http://www.youtube.com/watch?v=CPlT09ZIj48 http://packetstormsecurity.com/files/123901/HOTBOX-2.1.11-CSRF-Traversal-Denial-Of-Service.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-5039`	vulnerable	2026-06-08 05:04:50.693536	Details available Cross-site request forgery (CSRF) vulnerability in goform/wlanBasicSecurity on the HOT HOTBOX router with software 2.1.11 allows remote attackers to hijack the authentication of administrators for requests that change the WiFi Security field to Deactivated via the WifiSecurity parameter. Published: 2013-12-30T02:00:00.000Z Updated: 2024-08-06T16:59:41.307Z Open on db.gcve.eu Reference links http://www.youtube.com/watch?v=CPlT09ZIj48 http://packetstormsecurity.com/files/123901/HOTBOX-2.1.11-CSRF-Traversal-Denial-Of-Service.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-5038`	vulnerable	2026-06-08 05:04:50.693218	Details available The HOT HOTBOX router with software 2.1.11 allows remote attackers to bypass authentication by configuring a source IP address that had previously been used for an authenticated session. Published: 2013-12-30T02:00:00.000Z Updated: 2024-08-06T16:59:41.212Z Open on db.gcve.eu Reference links http://www.youtube.com/watch?v=CPlT09ZIj48 http://packetstormsecurity.com/files/123901/HOTBOX-2.1.11-CSRF-Traversal-Denial-Of-Service.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-5037`	vulnerable	2026-06-08 05:04:50.692790	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.