Xiongmai AHB7804R-MH-V2 Sofia Service access control
A vulnerability classified as critical was found in Xiongmai AHB7804R-MH-V2, AHB8004T-GL, AHB8008T-GL, AHB7004T-GS-V3, AHB7004T-MHV2, AHB8032F-LME and XM530_R80X30-PQ_8M. Affected by this vulnerability is an unknown functionality of the component Sofia Service. The manipulation with the input ff00000000000000000000000000f103250000007b202252657422203a203130302c202253657373696f6e494422203a202230783022207d0a leads to improper access controls. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-260605 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
AHB7804R-MH-V2
Vendor
Xiongmai
Product
AHB7804R-MH-V2
Platforms
Unknown
Default status
Unknown
AHB7804R-MH-V2 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
4.02.R11.24340142.10001.131900.00000
affected
Unavailable
Unavailable
Unavailable
None listed
4.02.R11.A8531149.10001.131900.00000
affected
Unavailable
Unavailable
Unavailable
None listed
4.02.R11.C6380171.11201.141900.00000
affected
Unavailable
Unavailable
Unavailable
None listed
4.03.R11.0000020X.11201.042300.0000005
affected
Unavailable
Unavailable
Unavailable
None listed
4.03.R11.4912720B.11201.142300.0000004
affected
Unavailable
Unavailable
Unavailable
None listed
4.03.R11.4912720D.11201.142300.0000004
affected
Unavailable
Unavailable
Unavailable
None listed
4.03.R11.4915714A.12201.142300.0000000
affected
Unavailable
Unavailable
Unavailable
None listed
5.00.R02.00030751.10010.348717.0000000
affected
Unavailable
Unavailable
Unavailable
None listed
AHB8004T-GL
Vendor
Xiongmai
Product
AHB8004T-GL
Platforms
Unknown
Default status
Unknown
AHB8004T-GL · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
4.02.R11.24340142.10001.131900.00000
affected
Unavailable
Unavailable
Unavailable
None listed
4.02.R11.A8531149.10001.131900.00000
affected
Unavailable
Unavailable
Unavailable
None listed
4.02.R11.C6380171.11201.141900.00000
affected
Unavailable
Unavailable
Unavailable
None listed
4.03.R11.0000020X.11201.042300.0000005
affected
Unavailable
Unavailable
Unavailable
None listed
4.03.R11.4912720B.11201.142300.0000004
affected
Unavailable
Unavailable
Unavailable
None listed
4.03.R11.4912720D.11201.142300.0000004
affected
Unavailable
Unavailable
Unavailable
None listed
4.03.R11.4915714A.12201.142300.0000000
affected
Unavailable
Unavailable
Unavailable
None listed
5.00.R02.00030751.10010.348717.0000000
affected
Unavailable
Unavailable
Unavailable
None listed
AHB8008T-GL
Vendor
Xiongmai
Product
AHB8008T-GL
Platforms
Unknown
Default status
Unknown
AHB8008T-GL · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
4.02.R11.24340142.10001.131900.00000
affected
Unavailable
Unavailable
Unavailable
None listed
4.02.R11.A8531149.10001.131900.00000
affected
Unavailable
Unavailable
Unavailable
None listed
4.02.R11.C6380171.11201.141900.00000
affected
Unavailable
Unavailable
Unavailable
None listed
4.03.R11.0000020X.11201.042300.0000005
affected
Unavailable
Unavailable
Unavailable
None listed
4.03.R11.4912720B.11201.142300.0000004
affected
Unavailable
Unavailable
Unavailable
None listed
4.03.R11.4912720D.11201.142300.0000004
affected
Unavailable
Unavailable
Unavailable
None listed
4.03.R11.4915714A.12201.142300.0000000
affected
Unavailable
Unavailable
Unavailable
None listed
5.00.R02.00030751.10010.348717.0000000
affected
Unavailable
Unavailable
Unavailable
None listed
AHB7004T-GS-V3
Vendor
Xiongmai
Product
AHB7004T-GS-V3
Platforms
Unknown
Default status
Unknown
AHB7004T-GS-V3 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
4.02.R11.24340142.10001.131900.00000
affected
Unavailable
Unavailable
Unavailable
None listed
4.02.R11.A8531149.10001.131900.00000
affected
Unavailable
Unavailable
Unavailable
None listed
4.02.R11.C6380171.11201.141900.00000
affected
Unavailable
Unavailable
Unavailable
None listed
4.03.R11.0000020X.11201.042300.0000005
affected
Unavailable
Unavailable
Unavailable
None listed
4.03.R11.4912720B.11201.142300.0000004
affected
Unavailable
Unavailable
Unavailable
None listed
4.03.R11.4912720D.11201.142300.0000004
affected
Unavailable
Unavailable
Unavailable
None listed
4.03.R11.4915714A.12201.142300.0000000
affected
Unavailable
Unavailable
Unavailable
None listed
5.00.R02.00030751.10010.348717.0000000
affected
Unavailable
Unavailable
Unavailable
None listed
AHB7004T-MHV2
Vendor
Xiongmai
Product
AHB7004T-MHV2
Platforms
Unknown
Default status
Unknown
AHB7004T-MHV2 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
4.02.R11.24340142.10001.131900.00000
affected
Unavailable
Unavailable
Unavailable
None listed
4.02.R11.A8531149.10001.131900.00000
affected
Unavailable
Unavailable
Unavailable
None listed
4.02.R11.C6380171.11201.141900.00000
affected
Unavailable
Unavailable
Unavailable
None listed
4.03.R11.0000020X.11201.042300.0000005
affected
Unavailable
Unavailable
Unavailable
None listed
4.03.R11.4912720B.11201.142300.0000004
affected
Unavailable
Unavailable
Unavailable
None listed
4.03.R11.4912720D.11201.142300.0000004
affected
Unavailable
Unavailable
Unavailable
None listed
4.03.R11.4915714A.12201.142300.0000000
affected
Unavailable
Unavailable
Unavailable
None listed
5.00.R02.00030751.10010.348717.0000000
affected
Unavailable
Unavailable
Unavailable
None listed
AHB8032F-LME
Vendor
Xiongmai
Product
AHB8032F-LME
Platforms
Unknown
Default status
Unknown
AHB8032F-LME · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
4.02.R11.24340142.10001.131900.00000
affected
Unavailable
Unavailable
Unavailable
None listed
4.02.R11.A8531149.10001.131900.00000
affected
Unavailable
Unavailable
Unavailable
None listed
4.02.R11.C6380171.11201.141900.00000
affected
Unavailable
Unavailable
Unavailable
None listed
4.03.R11.0000020X.11201.042300.0000005
affected
Unavailable
Unavailable
Unavailable
None listed
4.03.R11.4912720B.11201.142300.0000004
affected
Unavailable
Unavailable
Unavailable
None listed
4.03.R11.4912720D.11201.142300.0000004
affected
Unavailable
Unavailable
Unavailable
None listed
4.03.R11.4915714A.12201.142300.0000000
affected
Unavailable
Unavailable
Unavailable
None listed
5.00.R02.00030751.10010.348717.0000000
affected
Unavailable
Unavailable
Unavailable
None listed
XM530_R80X30-PQ_8M
Vendor
Xiongmai
Product
XM530_R80X30-PQ_8M
Platforms
Unknown
Default status
Unknown
XM530_R80X30-PQ_8M · Scoped product and version facts