Filtered by vendor Ignitenet Subscriptions
Filtered by product Helios Glinq Subscriptions
Total 3 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2020-5783 1 Ignitenet 1 Helios Glinq 2024-11-21 5.4 Medium
In IgniteNet HeliOS GLinq v2.2.1 r2961, the login functionality does not contain any CSRF protection mechanisms.
CVE-2020-5782 1 Ignitenet 1 Helios Glinq 2024-11-21 6.5 Medium
In IgniteNet HeliOS GLinq v2.2.1 r2961, if a user logs in and sets the ‘wan_type’ parameter, the wan interface for the device will become unreachable, which results in a denial of service condition for devices dependent on this connection.
CVE-2020-5781 1 Ignitenet 1 Helios Glinq 2024-11-21 4.3 Medium
In IgniteNet HeliOS GLinq v2.2.1 r2961, the langSelection parameter is stored in the luci configuration file (/etc/config/luci) by the authenticator.htmlauth function. When modified with arbitrary javascript, this causes a denial-of-service condition for all other users.