Skip to content
OpenAdvisories

Vendor

Four-Faith

8 known vulnerabilities.

Products

Water Conservancy Informatization Platform 5 F3x36 3 F3x24 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2024-9644 Public exploit

    Four-Faith F3x36 bapply.cgi Auth Bypass

    The Four-Faith F3x36 router using firmware v2.0.0 is vulnerable to an authentication bypass vulnerability in the administrative web server. Authentication is not enforced on some administrative functionality when using the "bapply.cgi" endpoint instead of the…

    Four-Faith F3x36
  • High 7.2
    CVE-2024-12856 Public exploit EPSS 84%

    Four-Faith Industrial Router adjust_sys_time OS Command Injection

    The Four-Faith router models F3x24 and F3x36 are affected by an operating system (OS) command injection vulnerability. At least firmware version 2.0 allows authenticated and remote attackers to execute arbitrary OS commands over HTTP when modifying the system…

    Four-Faith F3x36 F3x24