Vulnerabilities (CVE)

Filtered by vendor Swisscom Subscribe
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2019-19941 1 Swisscom 2 Centro Grande, Centro Grande Firmware 2021-02-03 3.5 LOW 5.4 MEDIUM
Missing hostname validation in Swisscom Centro Grande before 6.16.12 allows a remote attacker to inject its local IP address as a domain entry in the DNS service of the router via crafted hostnames in DHCP requests, causing XSS.
CVE-2018-16225 2 Qbeecam, Swisscom 4 Qbee Multi-sensor Camera, Qbee Multi-sensor Camera Firmware, Qbeecam and 1 more 2020-08-24 6.1 MEDIUM 6.5 MEDIUM
The QBee MultiSensor Camera through 4.16.4 accepts unencrypted network traffic from clients (such as the QBee Cam application through 1.0.5 for Android and the Swisscom Home application up to 10.7.2 for Android), which results in an attacker being able to reuse cookies to bypass authentication and disable the camera.