Filtered by vendor Ericsson
Subscribe
Total
23 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2003-1442 | 1 Ericsson | 1 Hm220dp Adsl Modem | 2017-07-29 | 7.5 HIGH | N/A |
The web administration page for the Ericsson HM220dp ADSL modem does not require authentication, which could allow remote attackers to gain access from the LAN side. | |||||
CVE-2015-2167 | 1 Ericsson | 1 Drutt Mobile Service Delivery Platform | 2016-12-03 | 5.8 MEDIUM | N/A |
Open redirect vulnerability in the 3PI Manager in Ericsson Drutt Mobile Service Delivery Platform (MSDP) 4, 5, and 6 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter to jsp/start-3pi-manager.jsp. | |||||
CVE-2015-2166 | 1 Ericsson | 1 Drutt Mobile Service Delivery Platform | 2016-12-03 | 5.0 MEDIUM | N/A |
Directory traversal vulnerability in the Instance Monitor in Ericsson Drutt Mobile Service Delivery Platform (MSDP) 4, 5, and 6 allows remote attackers to read arbitrary files via a ..%2f (dot dot encoded slash) in the default URI. |