Known Vulnerabilities for products from Carrier
Listed below are 16 of the newest known vulnerabilities associated with the vendor "Carrier".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-93815 json | Not Provided | 2026-09-24 | 2026-09-25 | |
| CVE-2026-93804 json | Not Provided | 2026-09-24 | 2026-09-25 | |
| CVE-2026-82476 json | Not Provided | 2026-08-29 | 2026-08-31 | |
| CVE-2026-80660 json | Not Provided | 2026-08-28 | 2026-08-28 | |
| CVE-2026-80659 json | Not Provided | 2026-08-28 | 2026-08-28 | |
| CVE-2026-74677 json | Not Provided | 2026-08-22 | 2026-08-22 | |
| CVE-2026-74468 json | Not Provided | 2026-08-15 | 2026-08-19 | |
| CVE-2026-69089 json | Not Provided | 2026-08-03 | 2026-08-03 | |
| CVE-2026-64429 json | Not Provided | 2026-07-25 | 2026-08-17 | |
| CVE-2026-64428 json | Not Provided | 2026-07-25 | 2026-08-17 | |
| CVE-2022-31486 json | An authenticated attacker can send a specially crafted route to the “edit_route.cgi” binary and have it execute shell com... | 8.8 - HIGH | 2022-06-06 | 2022-06-17 |
| CVE-2022-31485 json | An unauthenticated attacker can send a specially crafted packets to update the “notes” section of the home page of the we... | 5.3 - MEDIUM | 2022-06-06 | 2022-06-17 |
| CVE-2022-31484 json | An unauthenticated attacker can send a specially crafted network packet to delete a user from the web interface. This vulnera... | 7.5 - HIGH | 2022-06-06 | 2022-06-17 |
| CVE-2022-31483 json | An authenticated attacker can upload a file with a filename including “..” and “/” to achieve the ability to upload t... | 8.8 - HIGH | 2022-06-06 | 2022-06-17 |
| CVE-2022-31482 json | An unauthenticated attacker can send a specially crafted unauthenticated HTTP request to the device that can overflow a buffe... | 7.5 - HIGH | 2022-06-06 | 2022-06-17 |
| CVE-2022-31481 json | An unauthenticated attacker can send a specially crafted update file to the device that can overflow a buffer. This vulnerabi... | 10 - CRITICAL | 2022-06-06 | 2022-06-17 |
| CVE-2022-31480 json | An unauthenticated attacker could arbitrarily upload firmware files to the target device, ultimately causing a Denial-of-Serv... | 7.5 - HIGH | 2022-06-06 | 2022-06-17 |
| CVE-2022-31479 json | An unauthenticated attacker can update the hostname with a specially crafted name that will allow for shell commands to be ex... | 9.8 - CRITICAL | 2022-06-06 | 2023-06-29 |
| CVE-2022-26519 json | There is no limit to the number of attempts to authenticate for the local configuration pages for the Hills ComNav Version 30... | 5.5 - MEDIUM | 2022-04-20 | 2022-04-29 |
| CVE-2022-1318 json | Hills ComNav version 3002-19 suffers from a weak communication channel. Traffic across the local network for the configuratio... | 5.5 - MEDIUM | 2022-04-20 | 2023-07-24 |