Skip to content
OpenAdvisories

Vendor

telstra

4 known vulnerabilities.

3 results · Clear filters · Feed

  • Medium 6.9

    OpenKilda XXE in SAML configuration

    OpenKilda is an open-source OpenFlow controller. Prior to version 1.164.0, an XML external entity (XXE) injection vulnerability was found in OpenKilda which in combination with GHSL-2025-024 allows unauthenticated attackers to exfiltrate information from the …

  • Medium 5.3

    Telstra Smart Modem Gen 2 HTTP Header injection

    A vulnerability, which was classified as problematic, was found in Telstra Smart Modem Gen 2 up to 20250115. This affects an unknown part of the component HTTP Header Handler. The manipulation of the argument Content-Disposition leads to injection. It is poss…

  • Medium 6.8
    CVE-2023-43477 EPSS 18%

    Post-Auth Command Injection in Telstra Smart Modem Gen 2 (Arcadyan LH1000)

    The ping_from parameter of ping_tracerte.cgi in the web UI of Telstra Smart Modem Gen 2 (Arcadyan LH1000), firmware versions < 0.18.15r, was not properly sanitized before being used in a system call, which could allow an authenticated attacker to achieve comm…