Jio Jiofi 4g M2s Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Jio Jiofi 4g M2s Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2019-7439 — CVSS 6.5 (medium): cgi-bin/qcmap_web_cgi on JioFi 4G M2S 1.0.2 devices allows a DoS (Hang) via the mask POST parameter.
• CVE-2019-7440 — CVSS 6.5 (medium): JioFi 4G M2S 1.0.2 devices have CSRF via the SSID name and Security Key field under Edit Wi-Fi Settings (aka a SetWiFi_Setting request to…
• CVE-2019-7438 — CVSS 6.1 (medium): cgi-bin/qcmap_web_cgi on JioFi 4G M2S 1.0.2 devices has XSS and HTML injection via the mask POST parameter.