Skip to content
OpenAdvisories

Vendor

Shenzhen Hereta Technology

4 known vulnerabilities.

Products

Hereta ETH-IMC408M 4
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 5.4
    CVE-2026-29510

    Hereta ETH-IMC408M Stored XSS via Device Name

    Hereta ETH-IMC408M firmware version 1.0.15 and prior contain a stored cross-site scripting vulnerability that allows authenticated attackers to inject arbitrary JavaScript by manipulating the Device Name field. Attackers can inject malicious scripts through t…

    Shenzhen Hereta Technology Hereta ETH-IMC408M
  • Medium 5.4
    CVE-2026-29513

    Hereta ETH-IMC408M Stored XSS via Device Location

    Hereta ETH-IMC408M firmware version 1.0.15 and prior contain a stored cross-site scripting vulnerability that allows authenticated attackers to inject arbitrary JavaScript by manipulating the Device Location field. Attackers can inject malicious scripts throu…

    Shenzhen Hereta Technology Hereta ETH-IMC408M
  • Medium 6.1
    CVE-2026-29520

    Hereta ETH-IMC408M Reflected XSS via ping_ipaddr Parameter

    Hereta ETH-IMC408M firmware version 1.0.15 and prior contain a reflected cross-site scripting vulnerability in the Network Diagnosis ping function that allows attackers to execute arbitrary JavaScript. Attackers can craft malicious links with injected script …

    Shenzhen Hereta Technology Hereta ETH-IMC408M
  • Medium 4.3
    CVE-2026-29521

    Hereta ETH-IMC408M CSRF via Configuration Setup

    Hereta ETH-IMC408M firmware version 1.0.15 and prior contain a cross-site request forgery vulnerability that allows attackers to modify device configuration by exploiting missing CSRF protections in setup.cgi. Attackers can host malicious pages that submit fo…

    Shenzhen Hereta Technology Hereta ETH-IMC408M