PatchTheCVEs350i firmware vulnerabilities and fixes
Recent CVEs affecting s350i firmware, with upgrade or downgrade steps. 4 tracked.
Also searched as: s350ifirmware.
s350i firmware has 4 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 0. Most recent: 2018-01-11. Highest priority: CVE-2014-5071 (score 59/100).
- CVE-2014-5071 CRITICAL 9.8 MITIGATE SQL injection vulnerability in the checkPassword function in Symmetricom s350i 2.70.15 allows remote attackers
- CVE-2014-5070 HIGH 8.8 MITIGATE Symmetricom s350i 2.70.15 allows remote authenticated users to gain privileges via vectors related to pushing
- CVE-2014-5069 MEDIUM 6.1 MITIGATE Cross-site scripting (XSS) vulnerability in Symmetricom s350i 2.70.15 allows remote attackers to inject arbitr
- CVE-2014-5068 HIGH 7.5 MITIGATE Directory traversal vulnerability in the web application in Symmetricom s350i 2.70.15 allows remote attackers
FAQ
How do I fix s350i firmware vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is s350i firmware being exploited right now?
None of the tracked s350i firmware CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which s350i firmware CVE should I patch first?
CVE-2014-5071 currently ranks highest (59/100): SQL injection vulnerability in the checkPassword function in Symmetricom s350i 2.70.15 allows remote attackers.