Hereta Eth-imc408m Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Hereta Eth-imc408m Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2026-29520 — CVSS 6.1 (medium): Hereta ETH-IMC408M firmware version 1.0.15 and prior contain a reflected cross-site scripting vulnerability in the Network Diagnosis ping…
• CVE-2026-29510 — CVSS 5.4 (medium): Hereta ETH-IMC408M firmware version 1.0.15 and prior contain a stored cross-site scripting vulnerability that allows authenticated…
• CVE-2026-29513 — CVSS 5.4 (medium): Hereta ETH-IMC408M firmware version 1.0.15 and prior contain a stored cross-site scripting vulnerability that allows authenticated…
• CVE-2026-29521 — CVSS 4.3 (medium): Hereta ETH-IMC408M firmware version 1.0.15 and prior contain a cross-site request forgery vulnerability that allows attackers to modify…