PatchTheCVEprolink vulnerabilities
Recent CVEs affecting prolink products. 4 tracked.
prolink has 4 tracked vulnerabilities, 3 critical. A fixed release or vendor patch exists for 4. Most recent: 2021-08-06. Highest priority: CVE-2021-36707 (score 66/100).
- CVE-2021-36708 HIGH 7.5 UPGRADE In ProLink PRC2402M V1.0.18 and older, the set_sys_init function in the login.cgi binary allows an attacker to
- CVE-2021-36707 CRITICAL 9.8 UPGRADE In ProLink PRC2402M V1.0.18 and older, the set_ledonoff function in the adm.cgi binary, accessible with a page
- CVE-2021-36706 CRITICAL 9.8 UPGRADE In ProLink PRC2402M V1.0.18 and older, the set_sys_cmd function in the adm.cgi binary, accessible with a page
- CVE-2021-36705 CRITICAL 9.8 UPGRADE In ProLink PRC2402M V1.0.18 and older, the set_TR069 function in the adm.cgi binary, accessible with a page pa
FAQ
How do I fix prolink vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is prolink being exploited right now?
None of the tracked prolink CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which prolink CVE should I patch first?
CVE-2021-36707 currently ranks highest (66/100): In ProLink PRC2402M V1.0.18 and older, the set_ledonoff function in the adm.cgi binary, accessible with a page.