Vulnerabilities (CVE)

Filtered by vendor Columbiaweather Subscribe

Filtered by product Weather Microserver Firmware

CVSS v3 Filter

ALL

NONE (0.0) LOW (0.1 - 3.9) MEDIUM (4.0 - 6.9) HIGH (7.0 - 8.9) CRITICAL (9.0 - 10.0)

Search

Total 3 CVE

CVE	Vendors	Products	Updated	CVSS v2	CVSS v3
CVE-2018-18880	1 Columbiaweather	2 Weather Microserver, Weather Microserver Firmware	2019-06-18	3.5 LOW	5.4 MEDIUM
In firmware version MS_2.6.9900 of Columbia Weather MicroServer, a networkdiags.php reflected Cross-site scripting (XSS) vulnerability allows remote authenticated users to inject arbitrary web script.
CVE-2018-18876	1 Columbiaweather	2 Weather Microserver, Weather Microserver Firmware	2019-06-18	5.0 MEDIUM	5.3 MEDIUM
In firmware version MS_2.6.9900 of Columbia Weather MicroServer, a readouts_rd.php directory traversal issue makes it possible to read any file present on the underlying operating system.
CVE-2018-18875	1 Columbiaweather	2 Weather Microserver, Weather Microserver Firmware	2019-06-18	3.5 LOW	5.4 MEDIUM
In firmware version MS_2.6.9900 of Columbia Weather MicroServer, a stored Cross-site scripting (XSS) vulnerability allows remote authenticated users to inject arbitrary web script via changestationname.php.