Four-Faith
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Water Conservancy Informatization Platform | 5 | – | Oct 6, 2025 |
| F3x36 | 3 | – | Feb 4, 2025 |
| F3x24 | 1 | – | Dec 27, 2024 |
Exploited and recent CVEs
- CVE-2025-11337 Four-Faith Water Conservancy Informatization Platform download.do;othersusrlogout.do path traversal 0.7%
- CVE-2025-11336 Four-Faith Water Conservancy Informatization Platform download.do;otherlogout.do path traversal 0.7%
- CVE-2025-11018 Four-Faith Water Conservancy Informatization Platform download.do;usrlogout.do.do path traversal 1.0%
- CVE-2025-10709 Four-Faith Water Conservancy Informatization Platform historyDownload.do;otheruserLogin.do;getfile path traversal 1.0%
- CVE-2025-10708 Four-Faith Water Conservancy Informatization Platform historyDownload.do;usrlogout.do path traversal 1.0%
- CVE-2024-9644 Four-Faith F3x36 bapply.cgi Auth Bypass 0.7%
- CVE-2024-9643 Four-Faith F3x36 Hidden Debug Credentials 3.0%
- CVE-2024-12856 Four-Faith Industrial Router adjust_sys_time OS Command Injection 84.1%
- CVE-2024-12856 Four-Faith Industrial Router adjust_sys_time OS Command Injection 84.1%