https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2018-20220.htmlhttps://patchthecve.com/cve/CVE-2018-20220.htmlWed, 17 Jun 2026 01:52:28 +0000HIGH 7.5: An issue was discovered on Teracue ENC-400 devices with firmware 2.56 and below. While the web interface requires authentication before it can be interacted with, a large portion of the HTTP endpoints are missing authentication. An attacker is able to view these pages before being authenticated, andhttps://patchthecve.com/cve/CVE-2018-20219.htmlhttps://patchthecve.com/cve/CVE-2018-20219.htmlWed, 17 Jun 2026 01:52:28 +0000HIGH 8.1: An issue was discovered on Teracue ENC-400 devices with firmware 2.56 and below. After successful authentication, the device sends an authentication cookie to the end user such that they can access the devices web administration panel. This token is hard-coded to a string in the source code (/usr/shhttps://patchthecve.com/cve/CVE-2018-20218.htmlhttps://patchthecve.com/cve/CVE-2018-20218.htmlWed, 17 Jun 2026 01:52:28 +0000CRITICAL 9.8: An issue was discovered on Teracue ENC-400 devices with firmware 2.56 and below. The login form passes user input directly to a shell command without any kind of escaping or validation in /usr/share/www/check.lp file. An attacker is able to perform command injection using the "password" parameter in