32 matches found
LOYTEC LGATE-902 6.3.2 - Local File Inclusion
LOYTEC LGATE-902 6.3.2 is susceptible to local file inclusion which could allow an attacker to manipulate path references and access files and directories including critical system files that are stored outside the root folder of the web application running on the device. This can be used to read...
CVE-2018-14918
LOYTEC LGATE-902 6.3.2 devices allow Directory Traversal...
VulnCheck KEV: CVE-2018-14918
LOYTEC LGATE-902 6.3.2 devices allow Directory Traversal...
CVE-2018-14918
LOYTEC LGATE-902 6.3.2 devices allow Directory Traversal...
CVE-2018-14916
LOYTEC LGATE-902 6.3.2 devices allow Arbitrary file deletion...
CVE-2018-14916
LOYTEC LGATE-902 6.3.2 devices allow Arbitrary file deletion...
CVE-2018-14918
LOYTEC LGATE-902 6.3.2 devices allow Directory Traversal...
Directory traversal
LOYTEC LGATE-902 6.3.2 devices allow Directory Traversal...
Arbitrary file deletion
LOYTEC LGATE-902 6.3.2 devices allow Arbitrary file deletion...
CVE-2018-14916
Loytec LGATE-902 (pre-6.4.2) is affected by a local file inclusion vulnerability (CVE-2018-14916). The Nuclei template specifies versions prior to 6.4.2 as vulnerable, enabling an attacker to read sensitive files on the device. The CVE description notes arbitrary file deletion as associated risk....
CVE-2018-14916
LOYTEC LGATE-902 6.3.2 devices allow Arbitrary file deletion...
CVE-2018-14919
LOYTEC LGATE-902 6.3.2 devices allow XSS...
CVE-2018-14919
LOYTEC LGATE-902 6.3.2 devices allow XSS...
Cross site scripting
LOYTEC LGATE-902 6.3.2 devices allow XSS...
CVE-2018-14918
LOYTEC LGATE-902 6.3.2 devices allow Directory Traversal...
CVE-2018-14918
The CVE-2018-14918 entry concerns Loytec LGATE-902 devices. Affected firmware versions are 6.3.2 (and
CVE-2018-14919
LOYTEC LGATE-902 6.3.2 devices allow XSS...
CVE-2018-14919
The CVE-2018-14919 entry affects Loytec LGATE-902 gateways. Affected firmware is versions prior to 6.4.2 (tested on 6.3.2). The vulnerability is cross-site scripting (XSS) within the device web interface, with evidence of remote exposure. Public disclosures and third‑party writeups confirm that s...
PT-2019-9073
Name of the Vulnerable Software and Affected Versions LOYTEC LGATE-902 version 6.3.2 Description The issue allows for arbitrary file deletion. Recommendations For LOYTEC LGATE-902 version 6.3.2, at the moment, there is no information about a newer version that contains a fix for this vulnerabilit...
