Filtered by vendor Meinbwa Subscriptions
Filtered by product Direx-pro Subscriptions
Total 3 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2020-10249 1 Meinbwa 2 Direx-pro, Direx-pro Firmware 2024-08-04 5.3 Medium
BWA DiREX-Pro 1.2181 devices allow full path disclosure via an invalid name array parameter to val_soft.php3.
CVE-2020-10250 1 Meinbwa 2 Direx-pro, Direx-pro Firmware 2024-08-04 9.8 Critical
BWA DiREX-Pro 1.2181 devices allow remote attackers to execute arbitrary OS commands via shell metacharacters in the PKG parameter to uninstall.php3.
CVE-2020-10248 1 Meinbwa 2 Direx-pro, Direx-pro Firmware 2024-08-04 7.5 High
BWA DiREX-Pro 1.2181 devices allow remote attackers to discover passwords via a direct request to val_users.php3.