r1510 firmware vulnerabilities and fixes

Recent CVEs affecting r1510 firmware, with upgrade or downgrade steps. 26 tracked.

Also searched as: r1510firmware.

r1510 firmware has 26 tracked vulnerabilities, 13 critical. A fixed release or vendor patch exists for 0. Most recent: 2022-10-25. Highest priority: CVE-2022-33329 (score 67/100).

• CVE-2022-35271 HIGH 7.5 MITIGATE A denial of service vulnerability exists in the web_server hashFirst functionality of Robustel R1510 3.1.16 an
• CVE-2022-35270 HIGH 7.5 MITIGATE A denial of service vulnerability exists in the web_server hashFirst functionality of Robustel R1510 3.1.16 an
• CVE-2022-35269 HIGH 7.5 MITIGATE A denial of service vulnerability exists in the web_server hashFirst functionality of Robustel R1510 3.1.16 an
• CVE-2022-35268 HIGH 7.5 MITIGATE A denial of service vulnerability exists in the web_server hashFirst functionality of Robustel R1510 3.1.16 an
• CVE-2022-35267 HIGH 7.5 MITIGATE A denial of service vulnerability exists in the web_server hashFirst functionality of Robustel R1510 3.1.16 an
• CVE-2022-35266 HIGH 7.5 MITIGATE A denial of service vulnerability exists in the web_server hashFirst functionality of Robustel R1510 3.1.16 an
• CVE-2022-35265 HIGH 7.5 MITIGATE A denial of service vulnerability exists in the web_server hashFirst functionality of Robustel R1510 3.1.16 an
• CVE-2022-35264 HIGH 7.5 MITIGATE A denial of service vulnerability exists in the web_server hashFirst functionality of Robustel R1510 3.1.16 an
• CVE-2022-35263 HIGH 7.5 MITIGATE A denial of service vulnerability exists in the web_server hashFirst functionality of Robustel R1510 3.1.16 an
• CVE-2022-35262 HIGH 7.5 MITIGATE A denial of service vulnerability exists in the web_server hashFirst functionality of Robustel R1510 3.1.16 an
• CVE-2022-35261 HIGH 7.5 MITIGATE A denial of service vulnerability exists in the web_server hashFirst functionality of Robustel R1510 3.1.16 an
• CVE-2022-34850 HIGH 7.2 MITIGATE An OS command injection vulnerability exists in the web_server /action/import_authorized_keys/ functionality o
• CVE-2022-34845 LOW 2.7 MITIGATE A firmware update vulnerability exists in the sysupgrade functionality of Robustel R1510 3.1.16 and 3.3.0
• CVE-2022-33897 CRITICAL 9.1 MITIGATE A directory traversal vulnerability exists in the web_server /ajax/remove/ functionality of Robustel R1510 3.1
• CVE-2022-33329 CRITICAL 9.8 MITIGATE Multiple command injection vulnerabilities exist in the web_server ajax endpoints functionalities of Robustel
• CVE-2022-33328 CRITICAL 9.8 MITIGATE Multiple command injection vulnerabilities exist in the web_server ajax endpoints functionalities of Robustel
• CVE-2022-33327 CRITICAL 9.8 MITIGATE Multiple command injection vulnerabilities exist in the web_server ajax endpoints functionalities of Robustel
• CVE-2022-33326 CRITICAL 9.8 MITIGATE Multiple command injection vulnerabilities exist in the web_server ajax endpoints functionalities of Robustel
• CVE-2022-33325 CRITICAL 9.8 MITIGATE Multiple command injection vulnerabilities exist in the web_server ajax endpoints functionalities of Robustel
• CVE-2022-33314 CRITICAL 9.8 MITIGATE Multiple command injection vulnerabilities exist in the web_server action endpoints functionalities of Robuste
• CVE-2022-33313 CRITICAL 9.8 MITIGATE Multiple command injection vulnerabilities exist in the web_server action endpoints functionalities of Robuste
• CVE-2022-33312 CRITICAL 9.8 MITIGATE Multiple command injection vulnerabilities exist in the web_server action endpoints functionalities of Robuste
• CVE-2022-33150 CRITICAL 9.8 MITIGATE An OS command injection vulnerability exists in the js_package install functionality of Robustel R1510 3.1.16
• CVE-2022-32765 CRITICAL 9.8 MITIGATE An OS command injection vulnerability exists in the sysupgrade command injection functionality of Robustel R15
• CVE-2022-32585 CRITICAL 9.8 MITIGATE A command execution vulnerability exists in the clish art2 functionality of Robustel R1510 3.3.0
• CVE-2022-28127 CRITICAL 9.1 MITIGATE A data removal vulnerability exists in the web_server /action/remove/ API functionality of Robustel R1510 3.3.

FAQ

How do I fix r1510 firmware vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is r1510 firmware being exploited right now?

None of the tracked r1510 firmware CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which r1510 firmware CVE should I patch first?

CVE-2022-33329 currently ranks highest (67/100): Multiple command injection vulnerabilities exist in the web_server ajax endpoints functionalities of Robustel .

RSS feed for r1510 firmware · ← Back to latest CVEs