Welotec TK535L1 vulnerabilities

2 CVEs affecting Welotec TK535L1, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-1083, published 2024-04-09.

More from Welotec.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2023-1082, published 2024-04-09. High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days. An remote attacker with low privileges can perform a command injection which can lead to root access.
• CVE-2023-1083, published 2024-04-09. Critical severity, CVSS 9.8. EPSS: 0.7% chance of exploitation in the next 30 days. An unauthenticated remote attacker who is aware of a MQTT topic name can send and receive messages, including GET/SET configuration commands, reboot commands and firmware updates.