Amino Aria6xx Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Amino Aria6xx Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2020-10208 — CVSS 9.9 (critical): Command Injection in EntoneWebEngine in Amino Communications AK45x series, AK5xx series, AK65x series, Aria6xx series, Aria7/AK7Xx series…
• CVE-2020-10207 — CVSS 9.8 (critical): Use of Hard-coded Credentials in EntoneWebEngine in Amino Communications AK45x series, AK5xx series, AK65x series, Aria6xx series…
• CVE-2020-10210 — CVSS 9.8 (critical): Because of hard-coded SSH keys for the root user in Amino Communications AK45x series, AK5xx series, AK65x series, Aria6xx series…
• CVE-2020-10209 — CVSS 8.1 (high): Command Injection in the CPE WAN Management Protocol (CWMP) registration in Amino Communications AK45x series, AK5xx series, AK65x series…
• CVE-2020-10206 — CVSS 4.4 (medium): Use of a Hard-coded Password in VNCserver in Amino Communications AK45x series, AK5xx series, AK65x series, Aria6xx series, Aria7/AK7Xx…