CVE-2018-15483

CVE-2018-15483 affects KONE Group Controller (KGC) devices prior to 4.6.5. The issue enables Denial of Service via the open HTTP interface (KONE-04). Descriptions in connected sources confirm affected product/class and the vulnerability class, but there is no explicit remediation or in‑the‑wild e...

CVE-2018-15484

The CVE-2018-15484 entry affects KONE Group Controller (KGC) devices prior to 4.6.5. The issue allows unauthenticated remote code execution via the open HTTP interface by modifying autoexec.bat (aka KONE-01). Impact is high: attacker can achieve remote code execution with network access and no pr...

CVE-2018-15485

CVE-2018-15485 – KONE Group Controller (KGC) affects KGC devices before 4.6.5. The issue is that the FTP service does not require authentication or authorization, allowing unauthenticated access. According to NVD, this yields a high-impact potential for confidentiality and integrity (CVSS3: Criti...

CVE-2018-15486

The CVE-2018-15486 entry concerns KONE Group Controller (KGC) devices prior to version 4.6.5. The vulnerability enables Una uthenticated Local File Inclusion and file modification via the open HTTP interface by altering the name parameter of the file endpoint (aka KONE-02). This could impact conf...

PT-2018-13051

Name of the Vulnerable Software and Affected Versions KONE Group Controller KGC versions prior to 4.6.5 Description An issue was discovered where FTP does not require authentication or authorization. Recommendations For versions prior to 4.6.5, update to version 4.6.5 or later to resolve the issu...

CVE-2018-15483: Improper Input Validation

An issue was discovered on KONE Group Controller KGC devices before 4.6.5. Denial of Service can occur through the open HTTP interface, aka KONE-04...

PT-2018-13050

Name of the Vulnerable Software and Affected Versions KONE Group Controller KGC versions prior to 4.6.5 Description An issue allows unauthenticated remote code execution through the open HTTP interface by modifying autoexec.bat. Recommendations For versions prior to 4.6.5, update to version 4.6.5...

PT-2018-13052

Name of the Vulnerable Software and Affected Versions KONE Group Controller KGC versions prior to 4.6.5 Description An issue allows unauthenticated Local File Inclusion and File modification through the open HTTP interface. This can be achieved by modifying the name parameter of the file endpoint...

PT-2018-13049

Name of the Vulnerable Software and Affected Versions KONE Group Controller KGC versions prior to 4.6.5 Description An issue was discovered that allows Denial of Service to occur through the open HTTP interface. Recommendations For versions prior to 4.6.5, update to version 4.6.5 or later to...