verve connect vh510 firmware vulnerabilities and fixes

Recent CVEs affecting verve connect vh510 firmware, with upgrade or downgrade steps. 4 tracked.

Also searched as: verveconnectvh510firmware.

verve connect vh510 firmware has 4 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 4. Most recent: 2020-11-04. Highest priority: CVE-2020-27689 (score 65/100).

• CVE-2020-27692 HIGH 8.8 UPGRADE The Relish (Verve Connect) VH510 device with firmware before 1.0.1.6L0516 contains multiple CSRF vulnerabiliti
• CVE-2020-27691 MEDIUM 6.1 UPGRADE The Relish (Verve Connect) VH510 device with firmware before 1.0.1.6L0516 allows XSS via URLBlocking Settings,
• CVE-2020-27690 MEDIUM 5.5 UPGRADE The Relish (Verve Connect) VH510 device with firmware before 1.0.1.6L0516 contains a buffer overflow within it
• CVE-2020-27689 CRITICAL 9.8 UPGRADE The Relish (Verve Connect) VH510 device with firmware before 1.0.1.6L0516 contains undocumented default admin

FAQ

How do I fix verve connect vh510 firmware vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is verve connect vh510 firmware being exploited right now?

None of the tracked verve connect vh510 firmware CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which verve connect vh510 firmware CVE should I patch first?

CVE-2020-27689 currently ranks highest (65/100): The Relish (Verve Connect) VH510 device with firmware before 1.0.1.6L0516 contains undocumented default admin .

RSS feed for verve connect vh510 firmware · ← Back to latest CVEs