remote access server firmware vulnerabilities and fixes

Recent CVEs affecting remote access server firmware, with upgrade or downgrade steps. 5 tracked.

Also searched as: remoteaccessserverfirmware.

remote access server firmware has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 5. Most recent: 2025-01-17. Highest priority: CVE-2024-26155 (score 28/100).

• CVE-2024-26157 MEDIUM 6.1 UPGRADE All versions of ETIC Telecom Remote Access Server (RAS) prior to 4.5.0 are vulnerable to reflected cross site
• CVE-2024-26156 MEDIUM 4.8 UPGRADE All versions of ETIC Telecom Remote Access Server (RAS) prior to 4.5.0 are vulnerable to reflected cross site
• CVE-2024-26155 MEDIUM 6.8 UPGRADE All versions of ETIC Telecom Remote Access Server (RAS) prior to 4.5.0 expose clear text credentials in the w
• CVE-2024-26154 MEDIUM 4.8 UPGRADE All versions of ETIC Telecom Remote Access Server (RAS) prior to 4.5.0 are vulnerable to reflected cross site
• CVE-2024-26153 HIGH 7.4 UPGRADE All versions of ETIC Telecom Remote Access Server (RAS) prior to 4.9.19 are vulnerable to cross-site request

FAQ

How do I fix remote access server firmware vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is remote access server firmware being exploited right now?

None of the tracked remote access server firmware CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which remote access server firmware CVE should I patch first?

CVE-2024-26155 currently ranks highest (28/100): All versions of ETIC Telecom Remote Access Server (RAS) prior to 4.5.0 expose clear text credentials in the w.

RSS feed for remote access server firmware · ← Back to latest CVEs