JUMO: Allegro RomPager webserver vulnerability in JUMO mTRONT, DICON touch, AQUIS touch devices
Multiple products from JUMO are affected by webserver vulnerability "CVE-2013-6786, CVE-2014-9222, CVE-2014-9223. This vulnerability leads to DOS of the device by using a misfortune cookie and reflected XSS attacks.
beschreibt (3)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2014-9223US | high10.0 | — | ||
Multiple buffer overflows in AllegroSoft RomPager, as used in Huawei Home Gateway products and other vendors and products, allow remote attackers to cause a denial of service or po… | ||||
| CVE-2014-9222US | high10.0 | Exploit | ||
AllegroSoft RomPager 4.34 and earlier, as used in Huawei Home Gateway products and other vendors and products, allows remote attackers to gain privileges via a crafted cookie that… | ||||
| CVE-2013-6786US | medium4.3 | — | ||
Cross-site scripting (XSS) vulnerability in Allegro RomPager before 4.51, as used on the ZyXEL P660HW-D1, Huawei MT882, Sitecom WL-174, TP-LINK TD-8816, and D-Link DSL-2640R and DS… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- CERT@VDE Security Advisories for Jumoexternal
- VDE-2026-071: JUMO: Allegro RomPager webserver vulnerability in JUMO mTRONT, DICON touch, AQUIS touch devices - HTMLself
- VDE-2026-071: JUMO: Allegro RomPager webserver vulnerability in JUMO mTRONT, DICON touch, AQUIS touch devices - CSAFself
- Jumo PSIRTexternal
Behebungen (3)
- Behoben
Update affected devices to: Version 248.05.02 for JUMO mTRON T Central Processing Unit Version 249.05.03 for JUMO mTRON T Multifunction panel 840 Version 266.04.07 for JUMO DICON touch Version 304.09.04 for JUMO AQUIS touch
- Behoben
Update affected devices to: Version 248.05.02 for JUMO mTRON T Central Processing Unit Version 249.05.03 for JUMO mTRON T Multifunction panel 840 Version 266.04.07 for JUMO DICON touch Version 304.09.04 for JUMO AQUIS touch
- Behoben
Update affected devices to: Version 248.05.02 for JUMO mTRON T Central Processing Unit Version 249.05.03 for JUMO mTRON T Multifunction panel 840 Version 266.04.07 for JUMO DICON touch Version 304.09.04 for JUMO AQUIS touch
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan