UNIMO Technology Co., Ltd Vulnerabilities and Affected Products

Open in search

Explore source-attributed vulnerabilities associated with UNIMO Technology Co., Ltd products.

Products

Showing 4 vulnerabilities on this page

Signals CISA KEV Ransomware Nuclei
VulnerabilityTitle and contextCVSSEPSSPoCsSignals

Improper authentication vulnerability in UDR-JA1604/UDR-JA1608/UDR-JA1616 firmware versions 71x10.1.107112.43A and earlier allows a remote authenticated attacker to execute an arbitrary OS command on the device or alter the device settings.

CWE-287Dec 7, 2022
CVSS8.8v3.1EPSS0.866%PoCs0SignalsSTIX

OS command injection vulnerability in UDR-JA1604/UDR-JA1608/UDR-JA1616 firmware versions 71x10.1.107112.43A and earlier allows a remote authenticated attacker to execute an arbitrary OS command on the device or alter the device settings.

CWE-78Dec 7, 2022
CVSS8.8v3.1EPSS1.47%PoCs0SignalsSTIX

Hidden functionality vulnerability in UDR-JA1604/UDR-JA1608/UDR-JA1616 firmware versions 71x10.1.107112.43A and earlier allows a remote authenticated attacker to execute an arbitrary OS command on the device or alter the device settings.

CWE-78Dec 7, 2022
CVSS8.8v3.1EPSS0.999%PoCs0SignalsSTIX

unimo udr-ja1004_firmware Missing Authentication for Critical Function

Missing authentication for critical function vulnerability in UNIMO Technology digital video recorders (UDR-JA1004/JA1008/JA1016 firmware versions v1.0.20.13 and earlier, and UDR-JA1016 firmware versions v2.0.20.13 and earlier) allows a remote unauthenticated attacker to execute an arbitrary OS command by sending a specially crafted request to the affected device web interface.

CWE-306Aug 23, 2022
CVSS9.8v3.1EPSS1.3%PoCs0SignalsSTIX