Filtered by vendor Telstra Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2023-43477 1 Telstra 2 Arcadyan Lh1000, Arcadyan Lh1000 Firmware 2024-09-24 6.8 Medium
The ping_from parameter of ping_tracerte.cgi in the web UI of Telstra Smart Modem Gen 2 (Arcadyan LH1000), firmware versions < 0.18.15r, was not properly sanitized before being used in a system call, which could allow an authenticated attacker to achieve command injection as root on the device. 
CVE-2023-43478 1 Telstra 2 Arcadyan Lh1000, Arcadyan Lh1000 Firmware 2024-09-24 8.8 High
fake_upload.cgi on the Telstra Smart Modem Gen 2 (Arcadyan LH1000), firmware versions < 0.18.15r, allows unauthenticated attackers to upload firmware images and configuration backups, which could allow them to alter the firmware or the configuration on the device, ultimately leading to code execution as root.