10g08-0800gsm Firmware vulnerabilities
7 known vulnerabilities in 10g08-0800gsm Firmware from Binardat. 7 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.5 High severity
10G08-0800GSM Network Switch: Improper Restriction of Excessive Authentication Attempts
Binardat 10G08-0800GSM network switch firmware version V300SP10260209 and prior do not implement rate limiting or account lockout on failed login attempts, enabling brute-force attacks against user credentials.
- 7.5 High severity
10G08-0800GSM Network Switch: Cleartext Storage of Sensitive Information
Binardat 10G08-0800GSM network switch firmware versions prior to V300SP10260209 store a user password in a client-side cookie as a Base64-encoded value accessible via the web interface. Because Base64 is reversible and provides no confidentiality, an attacker
- 7.5 High severity
10G08-0800GSM Network Switch: Use of Hard-coded Cryptographic Key
Binardat 10G08-0800GSM network switch firmware version V300SP10260209 and prior use RC4 with a hard-coded key embedded in client-side JavaScript. Because the key is static and exposed, an attacker can decrypt protected values and defeat confidentiality protect
- 7.5 High severity
10G08-0800GSM Network Switch: Insertion of Sensitive Information Into Sent Data
Binardat 10G08-0800GSM network switch firmware version V300SP10260209 and prior expose user passwords in plaintext within the administrative interface and HTTP responses, allowing recovery of valid credentials.
- 9.1 Critical severity
10G08-0800GSM Network Switch: Use of Insufficiently Random Values
Binardat 10G08-0800GSM network switch firmware versions prior to V300SP10260209 generate predictable numeric session identifiers in the web management interface. An attacker can guess valid session IDs and hijack authenticated sessions.
- 9.8 Critical severity
10G08-0800GSM Network Switch: Use of Hard-coded Credentials
Binardat 10G08-0800GSM network switch firmware version V300SP10260209 and prior contain hard-coded administrative credentials that cannot be changed by users. Knowledge of these credentials allows full administrative access to the device.
- 8.8 High severity
10G08-0800GSM Network Switch: Improper Neutralization of Special Elements used in an OS Command
Binardat 10G08-0800GSM network switch firmware version V300SP10260209 and prior contain a command injection vulnerability in the traceroute diagnostic function of the affected device web management interface. By injecting the %1a character into the hostname pa