Skip to main content

CVE mentions, exploit signals, and PoC evidence in one fast public view.

Vendor archive

hot CVEs

Beta · best-effort

6 CVEs tagged to vendor hot — 0 Critical, 0 High, 3 Medium, 3 Low, 0 Unrated.

See this archive with more filters View vendor evidence profile Explore

CVE-2013-5220

Published Dec 30, 2013

goform/login on the HOT HOTBOX router with software 2.1.11 allows remote attackers to cause a denial of service (device crash) via crafted HTTP POST data.

CVSS 6.1 · Medium

Vendor/product tagsBeta · best-effort

CVE-2013-5219

Published Dec 30, 2013

Directory traversal vulnerability on the HOT HOTBOX router with software 2.1.11 allows remote attackers to read arbitrary files via a .. (dot dot) in a URI, as demonstrated by a r…

CVSS 3.3 · Low

Vendor/product tagsBeta · best-effort

CVE-2013-5218

Published Dec 30, 2013

Cross-site scripting (XSS) vulnerability on the HOT HOTBOX router with software 2.1.11 allows remote attackers to inject arbitrary web script or HTML via a crafted DHCP Host Name…

CVSS 2.9 · Low

Vendor/product tagsBeta · best-effort

CVE-2013-5039

Published Dec 30, 2013

Cross-site request forgery (CSRF) vulnerability in goform/wlanBasicSecurity on the HOT HOTBOX router with software 2.1.11 allows remote attackers to hijack the authentication of a…

CVSS 5.4 · Medium

Vendor/product tagsBeta · best-effort

CVE-2013-5038

Published Dec 30, 2013

The HOT HOTBOX router with software 2.1.11 allows remote attackers to bypass authentication by configuring a source IP address that had previously been used for an authenticated s…

CVSS 5.8 · Medium

Vendor/product tagsBeta · best-effort

CVE-2013-5037

Published Dec 30, 2013

The HOT HOTBOX router with software 2.1.11 has a default WPS PIN of 12345670, which makes it easier for remote attackers to obtain the WPA or WPA2 pre-shared key via EAP messages.

CVSS 3.3 · Low

Vendor/product tagsBeta · best-effort

Showing 1-6 of 6 CVEsPage 1 of 1