Meinbwa Direx-pro Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Meinbwa Direx-pro Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2020-10250 — CVSS 9.8 (critical): BWA DiREX-Pro 1.2181 devices allow remote attackers to execute arbitrary OS commands via shell metacharacters in the PKG parameter to…
• CVE-2020-10248 — CVSS 7.5 (high): BWA DiREX-Pro 1.2181 devices allow remote attackers to discover passwords via a direct request to val_users.php3.
• CVE-2020-10249 — CVSS 5.3 (medium): BWA DiREX-Pro 1.2181 devices allow full path disclosure via an invalid name array parameter to val_soft.php3.