Ampedwireless manufactures consumer and small-business wireless networking equipment, notably its R10000 router and associated firmware, which present a narrow but accessible attack surface through web-management interfaces. The observed vulnerability signal centers on cross-site request forgery issues affecting the device's administrative functions, a class of weakness endemic to embedded web consoles. Current vulnerability counts, severity distribution, and exploitation activity are shown in the live-stats panel alongside this summary.
The number and severity of CVEs published that impact products developed by Ampedwireless over time
Signals from CVEs in this vendor scope (3 CVEs).
3 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2015-7277CRITICAL The web administration interface on Amped Wireless R10000 devices with firmware 2.5.2.11 has a default password of admin for the admin account, which allows remote attackers to obt | Dec 31, 2015 | 9.8 | 24 | NO | NO |
CVE-2015-7278HIGH Cross-site request forgery (CSRF) vulnerability on Amped Wireless R10000 devices with firmware 2.5.2.11 allows remote attackers to hijack the authentication of arbitrary users. | Dec 31, 2015 | 8.8 | 22 | NO | NO |
CVE-2015-7279MEDIUM Amped Wireless R10000 devices with firmware 2.5.2.11 use an improper algorithm for selecting the ID value in the header of a DNS query, which makes it easier for remote attackers t | Dec 31, 2015 | 5.3 | 15 | NO | NO |
Signals from CVEs in this vendor scope (3 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Ampedwireless.
Media articles that mention a CVE ID that affects a product developed by Ampedwireless — matched by CVE ID, not by vendor name.