CVE-2018-17490

EasyLobby Solo is vulnerable to a denial of service. By visiting the kiosk and accessing the task manager, a local attacker could exploit this vulnerability to kill the process or launch new processes at will...

CVE-2018-17489

CVE-2018-17489 affects HID Global EasyLobby Solo. Affected version: EasyLobby Solo (observed in CNVD entry as EasyLobby Solo Information Disclosure) with plaintext storage of Social Security numbers in the Visitor database table, exploitable by a local attacker visiting the kiosk/self-service ser...

CVE-2018-17491

CVE-2018-17491 affects HID Global EasyLobby Solo. It describes a local privilege-escalation where a user at the kiosk can exit the program (esc) and perform unauthorized actions on the host. The NVD metrics list CVSSv3.0: LOCAL attack vector, LOW attack complexity, NONE privileges required, UI NO...

CVE-2018-17492

CVE-2018-17492 affects EasyLobby Solo (HID Global EasyLobby Solo) where default administrative credentials are present. The root cause is the use of default credentials, enabling a local attacker to gain full access to the application. The vulnerability is documented with a high impact in CVSS v3...