PatchTheCVEprc2402m firmware vulnerabilities and fixes
Recent CVEs affecting prc2402m firmware, with upgrade or downgrade steps. 4 tracked.
Also searched as: prc2402mfirmware.
prc2402m firmware has 4 tracked vulnerabilities, 3 critical. A fixed release or vendor patch exists for 4. Most recent: 2021-08-06. Highest priority: CVE-2021-36707 (score 66/100).
- CVE-2021-36708 HIGH 7.5 UPGRADE In ProLink PRC2402M V1.0.18 and older, the set_sys_init function in the login.cgi binary allows an attacker to
- CVE-2021-36707 CRITICAL 9.8 UPGRADE In ProLink PRC2402M V1.0.18 and older, the set_ledonoff function in the adm.cgi binary, accessible with a page
- CVE-2021-36706 CRITICAL 9.8 UPGRADE In ProLink PRC2402M V1.0.18 and older, the set_sys_cmd function in the adm.cgi binary, accessible with a page
- CVE-2021-36705 CRITICAL 9.8 UPGRADE In ProLink PRC2402M V1.0.18 and older, the set_TR069 function in the adm.cgi binary, accessible with a page pa
FAQ
How do I fix prc2402m firmware vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is prc2402m firmware being exploited right now?
None of the tracked prc2402m firmware CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which prc2402m firmware CVE should I patch first?
CVE-2021-36707 currently ranks highest (66/100): In ProLink PRC2402M V1.0.18 and older, the set_ledonoff function in the adm.cgi binary, accessible with a page.