Axesstel Mu553s Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Axesstel Mu553s Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2017-11351 — CVSS 9.8 (critical): Axesstel MU553S MU55XS-V1.14 devices have a default password of admin for the admin account.
• CVE-2017-11350 — CVSS 8.8 (high): Cross-Site Request Forgery (CSRF) exists in cgi-bin/ConfigSet on Axesstel MU553S MU55XS-V1.14 devices.
• CVE-2017-13724 — CVSS 5.4 (medium): On the Axesstel MU553S MU55XS-V1.14, there is a Stored Cross Site Scripting vulnerability in the APN parameter under the "Basic Settings"…