FFreshTomato

Products

Exploited and recent CVEs

• CVE-2023-3991 Critical 10.0 OS command injection vulnerability in FreshTomato 2023.3 2.1%
• CVE-2022-42484 Critical 9.1 An OS command injection vulnerability exists in the httpd logs/view.cgi functionality of FreshTomato 2022.5. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can s 6.0%
• CVE-2022-38451 Medium 6.8 A directory traversal vulnerability exists in the httpd update.cgi functionality of FreshTomato 2022.5. A specially crafted HTTP request can lead to arbitrary file read. An attacker can send an HTTP r 2.1%
• CVE-2022-28665 Medium 5.3 A memory corruption vulnerability exists in the httpd unescape functionality of FreshTomato 2022.1. A specially-crafted HTTP request can lead to memory corruption. An attacker can send a network reque 1.3%
• CVE-2022-28664 Medium 5.3 A memory corruption vulnerability exists in the httpd unescape functionality of FreshTomato 2022.1. A specially-crafted HTTP request can lead to memory corruption. An attacker can send a network reque 1.5%