CyberSecBulletin

TEM vulnerabilities

We track 4 vulnerabilities in TEM products across 5 products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on October 3, 2024.

4vulnerabilities
1critical
3high
0exploited
8.2average CVSS score

Latest TEM vulnerabilities

  • 9.3 Critical severity

    Opera Plus FM Family Transmitter: Missing Authentication for Critical Functionality

    CVE-2024-41988TEM

    TEM Opera Plus FM Family Transmitter allows access to an unprotected endpoint that allows MPFS File System binary image upload without authentication. This file system serves as the basis for the HTTP2 web server module but is also used by the SNMP module and

  • 8.6 High severity

    Opera Plus FM Family Transmitter: Cross-Site Request Forgery

    CVE-2024-41987TEM

    The TEM Opera Plus FM Family Transmitter application interface allows users to perform certain actions via HTTP requests without performing any validity checks to verify the requests. This can be exploited to perform certain actions with administrative privile

  • 7.5 High severity

    FLEX-1085: Improper Resource Shutdown or Release

    CVE-2022-2591TEMEPSS 9.33%

    A vulnerability classified as critical has been found in TEM FLEX-1085 1.6.0. Affected is an unknown function of the file /sistema/flash/reboot. The manipulation leads to denial of service. It is possible to launch the attack remotely. The exploit has been dis

  • 7.5 High severity

    FLEX-1080: Direct Request

    CVE-2022-1077TEMEPSS 2.51%

    A vulnerability was found in TEM FLEX-1080 and FLEX-1085 1.6.0. It has been declared as problematic. This vulnerability log.cgi of the component Log Handler. A direct request leads to information disclosure of hardware information. The attack can be initiated