Shenzhen Cudy Technology Co., Ltd. vulnerabilities
Every vulnerability this feed holds for Shenzhen Cudy Technology Co., Ltd., merged from five public registers and ordered by what warrants attention first — exploited in the wild, then CVSS, then recency.
12 vulnerabilities tracked.
- 9.2 Cudy TR3000 before 2.5.42 contains an authentication bypass vulnerability in the Mosquitto plugin authpluginjwt.so that accepts unsigned…
- 9.2 Cudy TR3000 before 2.5.42 contains an OS command injection vulnerability that allows a malicious or compromised ACS to execute commands as…
- 8.7 Cudy TR3000 before 2.5.42 contains an unauthenticated stack buffer overflow vulnerability in the stunclient TR-111 UDP Connection Request…
- 8.6 Cudy TR3000 before 2.5.42 contains a command injection vulnerability that allows authenticated administrators to execute commands as root…
- 8.6 Cudy TR3000 before 2.5.42 contains a command injection vulnerability that allows authenticated administrators to execute commands as root…
- 8.6 Cudy TR3000 before 2.5.42 contains a command injection vulnerability that allows authenticated administrators to execute commands as root…
- 8.6 Cudy TR3000 before 2.5.42 contains a command injection vulnerability in luci/model/cbi/vpn/openvpn/client.lua, which embeds the…
- 8.3 Cudy TR3000 before 2.5.42 contains an argument injection vulnerability that allows a malicious or compromised ACS to inject curl options…
- 8.2 Cudy TR3000 before 2.5.42 contains a stack buffer overflow vulnerability in the CWMP client that allows a malicious ACS to corrupt stack…
- 8.2 Cudy TR3000 before 2.5.42 contains a stack buffer overflow vulnerability in an obuspa getter for the TR-098 WLANConfiguration KeyPassphrase…
- 7.7 Cudy TR3000 before 2.5.42 contains a remote code execution vulnerability that allows unauthenticated adjacent attackers to run root…
- 6.1 Cudy TR3000 before 2.5.42 contains an insufficient verification of data authenticity vulnerability in the mtwifi Smart Mesh Technology…
What this covers
This feed accumulates forward from the day it started storing records, and a name search that finds nothing here is also looked up against the registers directly — so an older advisory resolves even when it predates the corpus. It is still a reading view, not a substitute for the vendor's own advisory, and absence from this page is not a statement that Shenzhen Cudy Technology Co., Ltd. is free of vulnerabilities.
Query this from an agent over MCP · Check a lockfile by version
Other vendors tracked here
Microsoft Linux Red Hat Google n/a Apple Apache Software Foundation Oracle Corporation zephyrproject Unknown FFMPEG Fortinet IBM Adobe Drupal SAP_SE Cisco Eclipse Foundation erlang OpenEMR AMD Grafana n8n-io Hitachi