Skip to content
OpenAdvisories

Vendor

Vodacom

1 known vulnerabilities.

Products

Vodafone H500s 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.7
    CVE-2022-4985

    Vodafone H500s WiFi Password Disclosure via activation.json

    Vodafone H500s devices running firmware v3.5.10 (hardware model Sercomm VFH500) expose the WiFi access point password via an unauthenticated HTTP endpoint. By sending a crafted GET request to /data/activation.json with specific headers and cookies, a remote a…

    Vodacom Vodafone H500s