CVE-2022-41324

Northern.tech Mender 3.3.x before 3.3.2 and 3.4.x before 3.4.0 has Incorrect Access Control and allows low-privileged users default read access to some sensitive device information...

CVE-2022-29555

The Deviceconnect microservice through 1.3.0 in Northern.tech Mender Enterprise before 3.2.2. allows Cross-Origin Websocket Hijacking...

CVE-2022-45929

Northern.tech Mender 3.3.x before 3.3.2, 3.5.x before 3.5.0, and 3.6.x before 3.6.0 has Incorrect Access Control and allows users to change their roles and could allow privilege escalation from a low-privileged read-only user to a high-privileged user...

CVE-2024-37019

Northern.tech Mender Enterprise before 3.6.4 and 3.7.x before 3.7.4 has Weak Authentication...

CVE-2024-55959

Northern.tech Mender Client 4.x before 4.0.5 has Insecure Permissions...

CVE-2024-55959

Northern.tech Mender Client 4.x before 4.0.5 has Insecure Permissions...

PT-2025-3165 · Northern.Tech · Mender Client

Name of the Vulnerable Software and Affected Versions: Northern.tech Mender Client versions 4.0.0 through 4.0.4 Description: The issue is related to insecure permissions in the Northern.tech Mender Client. Recommendations: For Northern.tech Mender Client versions 4.0.0 through 4.0.4, update to...

CVE-2024-55959

Northern.tech Mender Client 4.x before 4.0.5 has Insecure Permissions...

Northern.tech Mender 安全漏洞

Northern.tech Mender is a secure and reliable remote update solution from Northern.tech, Inc. It is suitable for connected devices of any size. A security vulnerability exists in Northern.tech Mender version 4.X prior to 4.0.5, which stems from insecure permissions on a private key file, resultin...

CVE-2024-55959

Northern.tech Mender Client versions 4.0.0 through 4.0.4 are affected by a security vulnerability involving insecure permissions . Specifically, the issue stems from insecure permissions on a private key file , which can lead to unauthorized access . To resolve this issue, users are recommended t...

CVE-2024-46948

Northern.tech Mender before 3.6.5 and 3.7.x before 3.7.5 has Incorrect Access Control...

CVE-2024-46948

Northern.tech Mender before 3.6.5 and 3.7.x before 3.7.5 has Incorrect Access Control...

CVE-2024-47190

Northern.tech Hosted Mender before 2024.07.11 allows SSRF...

CVE-2024-46947

Northern.tech Mender before 3.6.6 and 3.7.x before 3.7.7 allows SSRF...

Northern.tech Mender 安全漏洞

Northern.tech Mender is a secure and reliable remote update solution from Northern.tech, Inc. It is suitable for connected devices of any size. A security vulnerability exists in Northern.tech Mender versions prior to 3.6.6 and 3.7.x prior to 3.7.7 that stems from the presence of a server-side...

CVE-2024-46948

CVE-2024-46948 affects Northern.tech Mender before 3.6.5 and 3.7.x before 3.7.5, due to an Incorrect Access Control flaw. The vulnerability permits access control bypass (specifics not detailed in the provided documents). Affected components/versions are clearly stated; remediation is to upgrade ...

CVE-2024-46947

Northern.tech Mender before 3.6.6 and 3.7.x before 3.7.7 allows SSRF...

CVE-2024-46948

Northern.tech Mender before 3.6.5 and 3.7.x before 3.7.5 has Incorrect Access Control...

CVE-2024-47190

Northern.tech Hosted Mender before 2024.07.11 allows SSRF...

CVE-2024-47190

Northern.tech Hosted Mender before 2024.07.11 allows SSRF...