h660gw firmware vulnerabilities and fixes

Recent CVEs affecting h660gw firmware, with upgrade or downgrade steps. 3 tracked.

Also searched as: h660gwfirmware.

h660gw firmware has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2018-10-01. Highest priority: CVE-2018-17867 (score 53/100).

• CVE-2018-17869 HIGH 8.8 MITIGATE DASAN H660GW devices do not implement any CSRF protection mechanism.
• CVE-2018-17868 MEDIUM 4.8 MITIGATE DASAN H660GW devices have Stored XSS in the Port Forwarding functionality.
• CVE-2018-17867 HIGH 7.2 MITIGATE The Port Forwarding functionality on DASAN H660GW devices allows remote attackers to execute arbitrary code vi

FAQ

How do I fix h660gw firmware vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is h660gw firmware being exploited right now?

None of the tracked h660gw firmware CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which h660gw firmware CVE should I patch first?

CVE-2018-17867 currently ranks highest (53/100): The Port Forwarding functionality on DASAN H660GW devices allows remote attackers to execute arbitrary code vi.

RSS feed for h660gw firmware · ← Back to latest CVEs