Known Vulnerabilities for products from 3com

Listed below are 20 of the newest known vulnerabilities associated with the vendor "3com".

These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.

Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.

Additional devices specifications by 3com can be found at device.report : 3com

Known Vulnerabilities

CVE Shortened Description Severity Publish Date Last Modified
CVE-2010-2103 Cross-site scripting (XSS) vulnerability in axis2-admin/axis2-admin/engagingglobally in the administration console in Apache ... 4.3 - MEDIUM 2010-05-27 2018-10-10
CVE-2008-6395 The web management interface in 3Com Wireless 8760 Dual Radio 11a/b/g PoE Access Point allows remote attackers to cause a den... 7.8 - HIGH 2009-03-04 2017-08-17
CVE-2007-5420 The 3Com 3CRWER100-75 router with 1.2.10ww software, when remote management is disabled but a web server has been configured,... 2.6 - LOW 2007-10-12 2018-10-15
CVE-2007-5419 The 3Com 3CRWER100-75 router with 1.2.10ww software, when enabling an optional virtual server, configures this server to acce... 10 - HIGH 2007-10-12 2018-10-15
CVE-2007-3711 Unspecified vulnerability in TOS 2.1.x, 2.2.x before 2.2.5, and 2.5.x before 2.5.2 on TippingPoint IPS allows remote attacker... 7.5 - HIGH 2007-07-11 2018-10-15
CVE-2007-3701 TippingPoint IPS before 20070710 does not properly handle a hex-encoded alternate Unicode '/' (slash) character, which might ... 7.5 - HIGH 2007-07-11 2018-10-15
CVE-2007-3533 The 3Com IntelliJack Switch NJ220 before 2.0.23 allows remote attackers to cause a denial of service (reboot and reporting ou... 5 - MEDIUM 2007-07-03 2017-07-29
CVE-2007-2734 The 3Com TippingPoint IPS do not properly handle certain full-width and half-width Unicode character encodings in an HTTP POS... 7.5 - HIGH 2007-05-16 2018-10-16
CVE-2007-2276 ** DISPUTED ** 3Com TippingPoint IPS allows remote attackers to cause a denial of service (device hang) via a flood of packe... 7.8 - HIGH 2007-04-25 2023-11-07
CVE-2006-6183 Multiple stack-based buffer overflows in 3Com 3CTftpSvc 2.0.1, and possibly earlier, allow remote attackers to cause a denial... 10 - HIGH 2006-12-01 2018-10-17
CVE-2006-5382 3Com Switch SS3 4400 switches, firmware 5.11, 6.00 and 6.10 and earlier, allow remote attackers to read the SNMP Read-Write C... 7.5 - HIGH 2006-10-25 2017-07-20
CVE-2006-3974 Cross-site scripting (XSS) vulnerability in cgi-bin/admin in 3Com OfficeConnect Secure Router with firmware 1.04-168 allows r... 4.3 - MEDIUM 2007-06-11 2017-07-20
CVE-2006-3678 TippingPoint IPS running the TippingPoint Operating System (TOS) before 2.2.4.6519 allows remote attackers to "force the devi... 5 - MEDIUM 2006-07-26 2018-10-18
CVE-2006-2054 3Com Baseline Switch 2848-SFP Plus Model #3C16486 with firmware before 1.0.2.0 allows remote attackers to cause a denial of s... 5 - MEDIUM 2006-04-26 2017-07-20
CVE-2006-0993 The web management interface in 3Com TippingPoint SMS Server before 2.2.1.4478 does not restrict access to certain directorie... 5 - MEDIUM 2006-05-10 2018-10-18
CVE-2006-0362 TippingPoint Intrusion Prevention System (IPS) TOS before 2.1.4.6324, and TOS 2.2.x before 2.2.1.6506, allow remote attackers... 5 - MEDIUM 2006-01-22 2023-11-07
CVE-2005-2391 Unknown vulnerability in 3Com OfficeConnect Wireless 11g Access Point before 1.03.12 allows remote attackers to obtain sensit... 5 - MEDIUM 2005-07-27 2008-09-05
CVE-2005-2020 Directory traversal vulnerability in the web server for 3Com Network Supervisor 5.0.2 allows remote attackers to read arbitra... 5 - MEDIUM 2005-09-08 2011-03-08
CVE-2005-0419 Multiple heap-based buffer overflows in 3Com 3CServer allow remote authenticated users to execute arbitrary code via long FTP... 7.5 - HIGH 2005-04-27 2017-07-11
CVE-2005-0278 The FTP service in 3Com 3CDaemon 2.0 revision 10 allows remote attackers to gain sensitive information via a cd command that ... 5 - MEDIUM 2005-05-02 2017-07-11

Known software with vulnerabilities from 3com

Type Vendor Product Version
Hardware3com141701-
Hardware3com3c13612-
Hardware3com3c13613-
Hardware3com3c13616-
Hardware3com3c13700-
Hardware3com3c13750-
Hardware3com3c13754-
Hardware3com3c13758-
Application3com3c15100d-
Application3com3c16115-us-
Application3com3c16116-us-
Hardware3com3c16450-us-
Hardware3com3c16479-
Hardware3com3c16485-
Hardware3com3c16486-
Hardware3com3c16811-us-
Hardware3com3c16950-us-
Hardware3com3c16986a-us-
Hardware3com3c16987a-us-
Hardware3com3c16988a-us-