Netmodule Router Software

Every one of the 4 is a mark on the map. Named now: 1 to 4, most at risk first.

1. Certain NetModule devices allow Limited Session Fixation via PHPSESSID. These models with firmware before 4.3.0.113, 4.4.0.111, and 4.5.0.105 are affected: NB800, NB1600, NB1601,…CVE-2021-39290Netmodule · 1.5% likely

   CWE-384

2. Certain NetModule devices allow credentials via GET parameters to CLI-PHP. These models with firmware before 4.3.0.113, 4.4.0.111, and 4.5.0.105 are affected: NB800, NB1600, NB160…CVE-2021-39291Netmodule · 1.5% likely

   CWE-532

3. The web administration interface in NetModule Router Software (NRSW) 4.6 before 4.6.0.106 and 4.8 before 4.8.0.101 executes an OS command constructed with unsanitized user input:…CVE-2023-46306Netmodule · CVSS 8.4 · 1.2% likely

   CWE-78

4. Certain NetModule devices have Insecure Password Handling (cleartext or reversible encryption), These models with firmware before 4.3.0.113, 4.4.0.111, and 4.5.0.105 are affected:…CVE-2021-39289Netmodule · 1.1% likely

   CWE-522

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.