uhp-100 firmware vulnerabilities and fixes
Recent CVEs affecting uhp-100 firmware, with upgrade or downgrade steps. 2 tracked.
Also searched as: uhp 100 firmware, uhp-100firmware.
uhp-100 firmware has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2020-01-19. Highest priority: CVE-2020-7236 (score 39/100).
- CVE-2020-7236 MEDIUM 6.1 MITIGATE UHP UHP-100 3.4.1.15, 3.4.2.4, and 3.4.3 devices allow XSS via cw2?td= (Site Name field of the Site Setup sect
- CVE-2020-7235 MEDIUM 6.1 MITIGATE UHP UHP-100 3.4.1.15, 3.4.2.4, and 3.4.3 devices allow XSS via cB3?ta= (profile title).
FAQ
How do I fix uhp-100 firmware vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is uhp-100 firmware being exploited right now?
None of the tracked uhp-100 firmware CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which uhp-100 firmware CVE should I patch first?
CVE-2020-7236 currently ranks highest (39/100): UHP UHP-100 3.4.1.15, 3.4.2.4, and 3.4.3 devices allow XSS via cw2?td= (Site Name field of the Site Setup sect.