<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: firmware</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2016-6257: The firmware in Lenovo Ultraslim dongles, as used with Lenovo Liteon SK-8861, Ultraslim Wireless, and Silver S</title><link>https://patchthecve.com/cve/CVE-2016-6257.html</link><guid>https://patchthecve.com/cve/CVE-2016-6257.html</guid><pubDate>Wed, 17 Jun 2026 00:50:42 +0000</pubDate><description>MEDIUM 6.5: The firmware in Lenovo Ultraslim dongles, as used with Lenovo Liteon SK-8861, Ultraslim Wireless, and Silver Silk keyboards and Liteon ZTM600 and Ultraslim Wireless mice, does not enforce incrementing AES counters, which allows remote attackers to inject encrypted keyboard input into the system by l</description></item><item><title>CVE-2014-8657: The Compal Broadband Networks (CBN) CH6640E and CG6640E Wireless Gateway 1.0 with firmware CH6640-3.5.11.7-NOS</title><link>https://patchthecve.com/cve/CVE-2014-8657.html</link><guid>https://patchthecve.com/cve/CVE-2014-8657.html</guid><pubDate>Wed, 17 Jun 2026 00:17:06 +0000</pubDate><description>MEDIUM 5.0: The Compal Broadband Networks (CBN) CH6640E and CG6640E Wireless Gateway 1.0 with firmware CH6640-3.5.11.7-NOSH allows remote attackers to cause a denial of service (disconnect all wifi clients) via a request to wirelessChannelStatus.html.</description></item><item><title>CVE-2014-8656: The Compal Broadband Networks (CBN) CH6640E and CG6640E Wireless Gateway 1.0 with firmware CH6640-3.5.11.7-NOS</title><link>https://patchthecve.com/cve/CVE-2014-8656.html</link><guid>https://patchthecve.com/cve/CVE-2014-8656.html</guid><pubDate>Wed, 17 Jun 2026 00:17:06 +0000</pubDate><description>HIGH 10.0: The Compal Broadband Networks (CBN) CH6640E and CG6640E Wireless Gateway 1.0 with firmware CH6640-3.5.11.7-NOSH have a default password of (1) admin for the admin account and (2) compalbn for the root account, which makes it easier for remote attackers to obtain access to certain sensitive informati</description></item><item><title>CVE-2014-8655: The Compal Broadband Networks (CBN) CH6640E and CG6640E Wireless Gateway 1.0 with firmware CH6640-3.5.11.7-NOS</title><link>https://patchthecve.com/cve/CVE-2014-8655.html</link><guid>https://patchthecve.com/cve/CVE-2014-8655.html</guid><pubDate>Wed, 17 Jun 2026 00:17:06 +0000</pubDate><description>MEDIUM 5.0: The Compal Broadband Networks (CBN) CH6640E and CG6640E Wireless Gateway 1.0 with firmware CH6640-3.5.11.7-NOSH allows remote attackers to bypass authentication and obtain sensitive information via an (a) admin or a (b) root value in the userData cookie in a request to (1) CmgwWirelessSecurity.xml, </description></item><item><title>CVE-2014-8654: Multiple cross-site request forgery (CSRF) vulnerabilities in Compal Broadband Networks (CBN) CH6640E and CG66</title><link>https://patchthecve.com/cve/CVE-2014-8654.html</link><guid>https://patchthecve.com/cve/CVE-2014-8654.html</guid><pubDate>Wed, 17 Jun 2026 00:17:06 +0000</pubDate><description>MEDIUM 6.8: Multiple cross-site request forgery (CSRF) vulnerabilities in Compal Broadband Networks (CBN) CH6640E and CG6640E Wireless Gateway hardware 1.0 with firmware CH6640-3.5.11.7-NOSH allow remote attackers to hijack the authentication of administrators for requests that (1) have unspecified impact on DD</description></item><item><title>CVE-2014-8653: Cross-site scripting (XSS) vulnerability in Compal Broadband Networks (CBN) CH6640E and CG6640E Wireless Gatew</title><link>https://patchthecve.com/cve/CVE-2014-8653.html</link><guid>https://patchthecve.com/cve/CVE-2014-8653.html</guid><pubDate>Wed, 17 Jun 2026 00:17:05 +0000</pubDate><description>MEDIUM 4.3: Cross-site scripting (XSS) vulnerability in Compal Broadband Networks (CBN) CH6640E and CG6640E Wireless Gateway 1.0 with firmware CH6640-3.5.11.7-NOSH allows remote attackers to inject arbitrary web script or HTML via the userData cookie.</description></item><item><title>CVE-2013-2645: Multiple cross-site request forgery (CSRF) vulnerabilities on the TP-LINK WR1043N router with firmware TL-WR10</title><link>https://patchthecve.com/cve/CVE-2013-2645.html</link><guid>https://patchthecve.com/cve/CVE-2013-2645.html</guid><pubDate>Tue, 16 Jun 2026 23:53:45 +0000</pubDate><description>HIGH 9.3: Multiple cross-site request forgery (CSRF) vulnerabilities on the TP-LINK WR1043N router with firmware TL-WR1043ND_V1_120405 allow remote attackers to hijack the authentication of administrators for requests that (1) enable FTP access (aka &quot;FTP directory traversal&quot;) to /tmp via the shareEntire param</description></item></channel></rss>