Skip to content
OpenAdvisories

Vendor

openshwprojects

3 known vulnerabilities.

Products

OpenBK7231T_App 3
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.4
    CVE-2026-71275

    OpenBK7231T - Reflected XSS via OTA host Parameter

    OpenBK7231T's http_fn_ota_exec() (src/httpserver/http_fns.c) reflects the `host` query parameter directly into an HTML response via hprintf255(request, "<h3>OTA requested for %s!</h3>", tmpA) with no HTML encoding, allowing a crafted URL such as /ota_exec?hos…

    openshwprojects OpenBK7231T_App
  • Medium 6.5
    CVE-2026-71273

    OpenBK7231T CSRF in /cfg_wifi_set Leading to Implicit Web Password Disable and WiFi Hijack

    OpenBK7231T's /cfg_wifi_set endpoint (src/httpserver/http_fns.c) accepts configuration changes via a plain GET request with no CSRF token. If the parameter is absent from the request, an else-branch silently clears the device's web admin password to an empty …

    openshwprojects OpenBK7231T_App