Lucene search
+L

67 matches found

Cvelist
Cvelist
•added 2024/12/10 4:27 p.m.•61 views

CVE-2024-55547 Remote Command Execution via SNMP

SNMP objects in NET-SNMP used in ORing IAP-420 allows Command Injection. This issue affects IAP-420: through 2.01e...

9.3CVSS0.174EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/12/10 4:21 p.m.•33 views

CVE-2024-55546 Stored Cross-Site Scripting

Missing input validation in the ORing IAP-420 web-interface allows stored Cross-Site Scripting XSS.This issue affects IAP-420 version 2.01e and below...

7.1CVSS0.0029EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2024/12/10 4:21 p.m.•13 views

CVE-2024-55546 Stored Cross-Site Scripting

Missing input validation in the ORing IAP-420 web-interface allows stored Cross-Site Scripting XSS.This issue affects IAP-420 version 2.01e and below...

7.1CVSS6.4AI score0.0029EPSS
SaveExploits1References1
NVD
NVD
•added 2024/12/10 4:15 p.m.•28 views

CVE-2024-55544

Missing input validation in the ORing IAP-420 web-interface allows authenticated Command Injections on OS level.This issue affects IAP-420 version 2.01e and below...

8.8CVSS0.12043EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2024/12/10 4:14 p.m.•14 views

CVE-2024-55545 Reflected Cross-Site Scripting

Missing input validation in the ORing IAP-420 web-interface allows Cross-Site Scripting XSS.This issue affects IAP-420 version 2.01e and below...

7.1CVSS6.6AI score0.00307EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2024/12/10 4:14 p.m.•31 views

CVE-2024-55545 Reflected Cross-Site Scripting

Missing input validation in the ORing IAP-420 web-interface allows Cross-Site Scripting XSS.This issue affects IAP-420 version 2.01e and below...

7.1CVSS0.00307EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2024/12/10 4:04 p.m.•32 views

CVE-2024-55544 Authenticated Command Injection

Missing input validation in the ORing IAP-420 web-interface allows authenticated Command Injections on OS level.This issue affects IAP-420 version 2.01e and below...

8.7CVSS0.12043EPSS
SaveExploits1References1
CVE
CVE
•added 2024/12/10 4:04 p.m.•63 views

CVE-2024-55544

CVE-2024-55544 concerns ORing IAP-420 devices. The connected documents consistently identify a vulnerability due to missing input validation in the web interface , affecting versions 2.01e and below . The core consequence described is authenticated command injections on the OS level . Some source...

8.8CVSS6.6AI score0.12043EPSS
SaveExploits1References2Affected Software1
CNNVD
CNNVD
•added 2024/12/10 12:00 a.m.•16 views

ORing IAP-420 安全漏洞

The ORing IAP-420 is a wireless access point from ORing. A security vulnerability exists in the ORing IAP-420 version 2.01e and prior versions, which stems from a forced deadlock caused by improper password character length checking...

7.5CVSS6.8AI score0.00481EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/12/10 12:00 a.m.•28 views

PT-2024-36547

Name of the Vulnerable Software and Affected Versions ORing IAP-420 versions through 2.01e Description The issue affects the NET-SNMP used in ORing IAP-420, allowing Command Injection through SNMP objects. Recommendations For versions through 2.01e, consider disabling the SNMP functionality until...

9.8CVSS7.5AI score0.174EPSS
SaveExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/10 12:00 a.m.•2 views

CVE-2024-55546: Improper Neutralization of Input During Web Page Generation

Missing input validation in the ORing IAP-420 web-interface allows stored Cross-Site Scripting XSS.This issue affects IAP-420 version 2.01e and below...

7.1CVSS5.8AI score0.0029EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/10 12:00 a.m.•3 views

CVE-2024-55544: Improper Neutralization of Special Elements used in a Command

Missing input validation in the ORing IAP-420 web-interface allows authenticated Command Injections on OS level.This issue affects IAP-420 version 2.01e and below...

8.8CVSS5.8AI score0.12043EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/10 12:00 a.m.•2 views

CVE-2024-55545: Improper Neutralization of Input During Web Page Generation

Missing input validation in the ORing IAP-420 web-interface allows Cross-Site Scripting XSS.This issue affects IAP-420 version 2.01e and below...

7.1CVSS5.8AI score0.00307EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/12/10 12:00 a.m.•18 views

ORing IAP-420 安全漏洞

The ORing IAP-420 is a wireless access point from ORing. A security vulnerability exists in the ORing IAP-420 version 2.01e and prior versions, which stems from a lack of input validation in the web interface...

7.1CVSS6.7AI score0.0029EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/12/10 12:00 a.m.•19 views

ORing IAP-420 安全漏洞

The ORing IAP-420 is a wireless access point from ORing. A security vulnerability exists in the ORing IAP-420 version 2.01e and prior versions, which stems from a lack of input validation in the web interface...

8.8CVSS6.7AI score0.12043EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/12/10 12:00 a.m.•23 views

ORing IAP-420 安全漏洞

The ORing IAP-420 is a wireless access point from ORing. A security vulnerability exists in the ORing IAP-420 version 2.01e and prior versions that stems from an SNMP object in the used NET-SNMP that allows command injection...

9.8CVSS6.9AI score0.174EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/12/10 12:00 a.m.•13 views

ORing IAP-420 安全漏洞

The ORing IAP-420 is a wireless access point from ORing. A security vulnerability exists in the ORing IAP-420 version 2.01e and prior versions, which stems from a lack of input validation in the web interface...

7.1CVSS6.7AI score0.00307EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2024/12/10 12:00 a.m.•16 views

PT-2024-36545

Name of the Vulnerable Software and Affected Versions ORing IAP-420 versions 2.01e and earlier Description The issue is caused by a lack of input validation in the web interface of ORing IAP-420, allowing Cross-Site Scripting XSS. Recommendations For versions 2.01e and earlier, update to a versio...

7.1CVSS6.6AI score0.00307EPSS
SaveExploits1References8
Positive Technologies
Positive Technologies
•added 2024/12/10 12:00 a.m.•15 views

PT-2024-36546

Name of the Vulnerable Software and Affected Versions ORing IAP-420 versions 2.01e and below Description The issue is related to a lack of input validation in the web interface of the ORing IAP-420, which allows for stored Cross-Site Scripting XSS. This means that an attacker can inject malicious...

7.1CVSS6.2AI score0.0029EPSS
SaveExploits1References8
Positive Technologies
Positive Technologies
•added 2024/12/10 12:00 a.m.•15 views

PT-2024-36544

Name of the Vulnerable Software and Affected Versions ORing IAP-420 versions 2.01e and below Description The issue is caused by missing input validation in the web interface of ORing IAP-420, allowing stored Cross-Site Scripting XSS. This enables attackers to store malicious scripts on the device...

8.8CVSS5.9AI score0.12043EPSS
SaveExploits1References11
Rows per page
Query Builder