PatchTheCVE: etictelecomhttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2024-26157: All versions of ETIC Telecom Remote Access Server (RAS) prior to 4.5.0 are vulnerable to reflected cross sitehttps://patchthecve.com/cve/CVE-2024-26157.htmlhttps://patchthecve.com/cve/CVE-2024-26157.htmlWed, 17 Jun 2026 07:17:13 +0000MEDIUM 6.1: All versions of ETIC Telecom Remote Access Server (RAS) prior to 4.5.0 are vulnerable to reflected cross site scripting (XSS) attacks in get view method under view parameter. The ETIC RAS web server uses dynamic pages that get their input from the client side and reflect the input in their respoCVE-2024-26156: All versions of ETIC Telecom Remote Access Server (RAS) prior to 4.5.0 are vulnerable to reflected cross sitehttps://patchthecve.com/cve/CVE-2024-26156.htmlhttps://patchthecve.com/cve/CVE-2024-26156.htmlWed, 17 Jun 2026 07:17:13 +0000MEDIUM 4.8: All versions of ETIC Telecom Remote Access Server (RAS) prior to 4.5.0 are vulnerable to reflected cross site scripting (XSS) attacks in the method parameter. The ETIC RAS web server uses dynamic pages that gets their input from the client side and reflects the input in its response to the clienCVE-2024-26155: All versions of ETIC Telecom Remote Access Server (RAS) prior to 4.5.0 expose clear text credentials in the whttps://patchthecve.com/cve/CVE-2024-26155.htmlhttps://patchthecve.com/cve/CVE-2024-26155.htmlWed, 17 Jun 2026 07:17:12 +0000MEDIUM 6.8: All versions of ETIC Telecom Remote Access Server (RAS) prior to 4.5.0 expose clear text credentials in the web portal. An attacker can access the ETIC RAS web portal and view the HTML code, which is configured to be hidden, thus allowing a connection to the ETIC RAS ssh server, which could enabCVE-2024-26154: All versions of ETIC Telecom Remote Access Server (RAS) prior to 4.5.0 are vulnerable to reflected cross sitehttps://patchthecve.com/cve/CVE-2024-26154.htmlhttps://patchthecve.com/cve/CVE-2024-26154.htmlWed, 17 Jun 2026 07:17:12 +0000MEDIUM 4.8: All versions of ETIC Telecom Remote Access Server (RAS) prior to 4.5.0 are vulnerable to reflected cross site scripting in the appliance site name. The ETIC RAS web server saves the site name and then presents it to the administrators in a few different pages.CVE-2024-26153: All versions of ETIC Telecom Remote Access Server (RAS) prior to 4.9.19 are vulnerable to cross-site request https://patchthecve.com/cve/CVE-2024-26153.htmlhttps://patchthecve.com/cve/CVE-2024-26153.htmlWed, 17 Jun 2026 07:17:12 +0000HIGH 7.4: All versions of ETIC Telecom Remote Access Server (RAS) prior to 4.9.19 are vulnerable to cross-site request forgery (CSRF). An external attacker with no access to the device can force the end user into submitting a "setconf" method request, not requiring any CSRF token, which can lead into deni