Note:
This project will be discontinued after December 13, 2021. [more]
Product:
Firmware_analysis_and_comparison_tool
(Firmware_analysis_and_comparison_tool_project)Repositories |
Unknown: This might be proprietary software. |
#Vulnerabilities | 3 |
Date | Id | Summary | Products | Score | Patch | Annotated |
---|---|---|---|---|---|---|
2022-03-30 | CVE-2021-44310 | An issue was discovered in Firmware Analysis and Comparison Tool v3.2. With administrator privileges, the attacker could perform stored XSS attacks by inserting JavaScript and HTML code in user creation functionality. | Firmware_analysis_and_comparison_tool | 4.8 | ||
2022-03-30 | CVE-2021-44312 | An issue was discovered in Firmware Analysis and Comparison Tool v3.2. Logged in administrators could be targeted by a CSRF attack through visiting a crafted web page. | Firmware_analysis_and_comparison_tool | 8.8 | ||
2020-04-02 | CVE-2020-11499 | Firmware Analysis and Comparison Tool (FACT) 3 has Stored XSS when updating analysis details via a localhost web request, as demonstrated by mishandling of the tags and version fields in helperFunctions/mongo_task_conversion.py. | Firmware_analysis_and_comparison_tool | N/A |