Read the docs

Aethon

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9

Exploited now

Aethon records in CISA KEV

No Aethon vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Tug Home Base Server 5 records MEDIUM

Records

5 records

TI-2022-10509 CVE-2022-27494 · GHSA-p4x7-px78-gghm

CROSS-SITE SCRIPTING CWE-79

Priority MEDIUM 43

Aethon TUG Home Base Server versions prior to version 24 are affected by un unauthenticated attacker who can freely access hashed user credentials.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00652 Published 2022-10-21 Fixed in 24 CWE-79
TI-2022-09772 CVE-2022-26423 · GHSA-c7xv-h5wg-6fq8

MISSING AUTHORIZATION CWE-862

Priority MEDIUM 43

Aethon TUG Home Base Server versions prior to version 24 are affected by un unauthenticated attacker who can freely access hashed user credentials.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.008 Published 2022-10-21 Fixed in 24 CWE-200
TI-2022-00966 CVE-2022-1070 · GHSA-583f-56ww-9ppj

CHANNEL ACCESSIBLE BY NON-ENDPOINT CWE-300

Priority MEDIUM 43

Aethon TUG Home Base Server versions prior to version 24 are affected by un unauthenticated attacker who can freely access hashed user credentials.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00749 Published 2022-10-21 Fixed in 24 CWE-200
TI-2022-00962 CVE-2022-1066 · GHSA-p6xg-jwp4-9fj2

MISSING AUTHORIZATION CWE-862

Priority MEDIUM 43

Aethon TUG Home Base Server versions prior to version 24 are affected by un unauthenticated attacker who can freely access hashed user credentials.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00754 Published 2022-10-21 Fixed in 24 CWE-284
TI-2022-00956 CVE-2022-1059 · GHSA-4ppw-fh8f-gwjp

CROSS-SITE SCRIPTING CWE-79

Priority MEDIUM 43

Aethon TUG Home Base Server versions prior to version 24 are affected by un unauthenticated attacker who can freely access hashed user credentials.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00657 Published 2022-10-21 Fixed in 24 CWE-79
Open these records in search →