PatchTheCVEtermod4 firmware vulnerabilities and fixes
Recent CVEs affecting termod4 firmware, with upgrade or downgrade steps. 3 tracked.
Also searched as: termod4firmware.
termod4 firmware has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2021-01-26. Highest priority: CVE-2020-23160 (score 59/100).
- CVE-2020-23162 HIGH 7.5 UPGRADE Sensitive information disclosure and weak encryption in Pyrescom Termod4 time management devices before 10.04k
- CVE-2020-23161 MEDIUM 6.5 UPGRADE Local file inclusion in Pyrescom Termod4 time management devices before 10.04k allows authenticated remote att
- CVE-2020-23160 HIGH 8.8 UPGRADE Remote code execution in Pyrescom Termod4 time management devices before 10.04k allows authenticated remote at
FAQ
How do I fix termod4 firmware vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is termod4 firmware being exploited right now?
None of the tracked termod4 firmware CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which termod4 firmware CVE should I patch first?
CVE-2020-23160 currently ranks highest (59/100): Remote code execution in Pyrescom Termod4 time management devices before 10.04k allows authenticated remote at.