PatchTheCVEkraftway vulnerabilities
Recent CVEs affecting kraftway products. 6 tracked.
kraftway has 6 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 5. Most recent: 2018-08-17. Highest priority: CVE-2018-15353 (score 63/100).
- CVE-2018-15355 MEDIUM 5.9 UPGRADE Usage of SSLv2 and SSLv3 leads to transmitted data decryption in Kraftway 24F2XG Router firmware 3.5.30.1118.
- CVE-2018-15354 HIGH 7.5 UPGRADE A Buffer Overflow exploited through web interface by remote attacker can cause denial of service in Kraftway 2
- CVE-2018-15353 CRITICAL 9.8 UPGRADE A Buffer Overflow exploited through web interface by remote attacker can cause remote code execution in Kraftw
- CVE-2018-15352 MEDIUM 6.5 MITIGATE An attacker with low privileges can cause denial of service in Kraftway 24F2XG Router firmware version 3.5.30.
- CVE-2018-15351 MEDIUM 6.5 UPGRADE Denial of service via crafting malicious link and sending it to a privileged user can cause Denial of Service
- CVE-2018-15350 CRITICAL 9.8 UPGRADE Router Default Credentials in Kraftway 24F2XG Router firmware version 3.5.30.1118 allow remote attackers to ge
FAQ
How do I fix kraftway vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is kraftway being exploited right now?
None of the tracked kraftway CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which kraftway CVE should I patch first?
CVE-2018-15353 currently ranks highest (63/100): A Buffer Overflow exploited through web interface by remote attacker can cause remote code execution in Kraftw.