Furuno Felcom 250 Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Furuno Felcom 250 Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2018-16590 — CVSS 9.8 (critical): FURUNO FELCOM 250 and 500 devices use only client-side JavaScript in login.js for authentication.
• CVE-2018-16591 — CVSS 9.8 (critical): FURUNO FELCOM 250 and 500 devices allow unauthenticated users to change the password for the Admin, Log and Service accounts, as well as…
• CVE-2018-16705 — CVSS 9.8 (critical): FURUNO FELCOM 250 and 500 devices allow unauthenticated access to the xml/permission.xml file containing all of the system's usernames and…