Meinbwa: >> Direx-Pro Firmware Security Vulnerabilities
BWA DiREX-Pro 1.2181 devices allow remote attackers to discover passwords via a direct request to val_users.php3.
CVSS Score
7.5
EPSS Score
0.005
Published
2020-03-09
BWA DiREX-Pro 1.2181 devices allow full path disclosure via an invalid name array parameter to val_soft.php3.
CVSS Score
5.3
EPSS Score
0.004
Published
2020-03-09
BWA DiREX-Pro 1.2181 devices allow remote attackers to execute arbitrary OS commands via shell metacharacters in the PKG parameter to uninstall.php3.
CVSS Score
9.8
EPSS Score
0.033
Published
2020-03-09