Netcrunch Security Vulnerabilities and Issues — Netcrunch CVE List

Lucene search

AdremsoftNetcrunch

3 matches found

CVE•added 2020/12/16 5:15 p.m.•37 views

CVE-2019-14479

AdRem NetCrunch 10.6.0.4587 allows Remote Code Execution. In the NetCrunch web client, a read-only administrator can execute arbitrary code on the server running the NetCrunch server software.

9CVSS9AI score0.07617EPSS

CVE•added 2020/12/16 4:15 p.m.•34 views

CVE-2019-14483

AdRem NetCrunch 10.6.0.4587 allows Credentials Disclosure. Every user can read the BSD, Linux, MacOS and Solaris private keys, private keys' passwords, and root passwords stored in the credential manager. Every administrator can read the ESX and Windows passwords stored in the credential manager.

9CVSS8.4AI score0.0039EPSS

CVE•added 2020/12/16 4:15 p.m.•32 views

CVE-2019-14480

AdRem NetCrunch 10.6.0.4587 has an Improper Session Handling vulnerability in the NetCrunch web client, which can lead to an authentication bypass or escalation of privileges.

9.8CVSS9.7AI score0.00291EPSS