Skip to content
OpenAdvisories

Vendor

ETIC Telecom

9 known vulnerabilities.

Products

Remote Access Server (RAS) 9 RAS 0
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.4
    CVE-2024-26153

    ETIC Telecom Remote Access Server (RAS) Cross-Site Request Forgery

    All versions of ETIC Telecom Remote Access Server (RAS) prior to 4.9.19 are vulnerable to cross-site request forgery (CSRF). An external attacker with no access to the device can force the end user into submitting a "setconf" method request, not requiring any…

    ETIC Telecom Remote Access Server (RAS)
  • High 7.1
    CVE-2023-3453

    ETIC Telecom Insecure Default Initialization of Resource

    ETIC Telecom RAS versions 4.7.0 and prior the web management portal authentication disabled by default. This could allow an attacker with adjacent network access to alter the configuration of the device or cause a denial-of-service condition.

    ETIC Telecom Remote Access Server (RAS)
  • High 7.6
    CVE-2022-3703

    ETIC Telecom Remote Access Server Insufficient Verification of Data Authenticity

    All versions of ETIC Telecom Remote Access Server (RAS) 4.5.0 and prior’s web portal is vulnerable to accepting malicious firmware packages that could provide a backdoor to an attacker and provide privilege escalation to the device.

    ETIC Telecom Remote Access Server (RAS)