PatchTheCVEjio vulnerabilities
Recent CVEs affecting jio products. 7 tracked.
jio has 7 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 0. Most recent: 2019-05-07. Highest priority: CVE-2019-7745 (score 62/100).
- CVE-2019-7746 HIGH 8.1 MITIGATE JioFi 4 jmr1140 Amtel_JMR1140_R12.07 devices allow remote attackers to obtain an admin token by making a /cgi-
- CVE-2019-7745 CRITICAL 9.8 MITIGATE JioFi 4 jmr1140 Amtel_JMR1140_R12.07 devices allow remote attackers to obtain the Wi-Fi password by making a c
- CVE-2019-7687 MEDIUM 6.1 MITIGATE cgi-bin/qcmap_web_cgi on JioFi 4 jmr1140 Amtel_JMR1140_R12.07 devices has POST based reflected XSS via the Pag
- CVE-2019-7440 MEDIUM 6.5 MITIGATE JioFi 4G M2S 1.0.2 devices have CSRF via the SSID name and Security Key field under Edit Wi-Fi Settings (aka a
- CVE-2019-7439 MEDIUM 6.5 MITIGATE cgi-bin/qcmap_web_cgi on JioFi 4G M2S 1.0.2 devices allows a DoS (Hang) via the mask POST parameter.
- CVE-2019-7438 MEDIUM 6.1 MITIGATE cgi-bin/qcmap_web_cgi on JioFi 4G M2S 1.0.2 devices has XSS and HTML injection via the mask POST parameter.
- CVE-2018-15181 MEDIUM 6.5 MITIGATE JioFi 4G Hotspot M2S devices allow attackers to cause a denial of service (secure configuration outage) via an
FAQ
How do I fix jio vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is jio being exploited right now?
None of the tracked jio CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which jio CVE should I patch first?
CVE-2019-7745 currently ranks highest (62/100): JioFi 4 jmr1140 Amtel_JMR1140_R12.07 devices allow remote attackers to obtain the Wi-Fi password by making a c.