PatchTheCVEmicrosemi vulnerabilities
Recent CVEs affecting microsemi products. 4 tracked.
microsemi has 4 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 0. Most recent: 2018-01-11. Highest priority: CVE-2014-5071 (score 59/100).
- CVE-2014-5071 CRITICAL 9.8 MITIGATE SQL injection vulnerability in the checkPassword function in Symmetricom s350i 2.70.15 allows remote attackers
- CVE-2014-5070 HIGH 8.8 MITIGATE Symmetricom s350i 2.70.15 allows remote authenticated users to gain privileges via vectors related to pushing
- CVE-2014-5069 MEDIUM 6.1 MITIGATE Cross-site scripting (XSS) vulnerability in Symmetricom s350i 2.70.15 allows remote attackers to inject arbitr
- CVE-2014-5068 HIGH 7.5 MITIGATE Directory traversal vulnerability in the web application in Symmetricom s350i 2.70.15 allows remote attackers
FAQ
How do I fix microsemi vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is microsemi being exploited right now?
None of the tracked microsemi CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which microsemi CVE should I patch first?
CVE-2014-5071 currently ranks highest (59/100): SQL injection vulnerability in the checkPassword function in Symmetricom s350i 2.70.15 allows remote attackers.