Read the docs

Alpine

Records26All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high14CVSS 7.0–8.9

Exploited now

Alpine records in CISA KEV

No Alpine vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

26 records

TI-2024-15911 CVE-2024-23923 · GHSA-4grv-37wf-jg36

Use after free in Alpine Halo9

Priority MEDIUM 41

Alpine Halo9 prh_l2_sar_data_ind Use-After-Free Remote Code Execution Vulnerability.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00789 Published 2024-09-28 No fix listed CWE-416
TI-2025-07761 CVE-2025-8480 · GHSA-9847-xprf-x456

Path traversal in Alpine iLX-507

Priority LOW 38

Alpine iLX-507 Command Injection Remote Code Execution.

CVSS 3.0HIGH 8.0 Adjacent network No auth User interaction EPSS 0.00596 Published 2025-08-01 No fix listed CWE-22
TI-2024-15941 CVE-2024-23963 · GHSA-5235-m374-99w3

Alpine Halo9 Stack-based Buffer Overflow

Priority LOW 37

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine Halo9 devices.

CVSS 3.1HIGH 8.0 Adjacent network No auth User interaction EPSS 0.00474 Published 2025-01-30 No fix listed CWE-94
TI-2024-15918 CVE-2024-23935 · GHSA-jh62-xx57-p239

Stack-based buffer overflow in Alpine Halo9

Priority LOW 37

Alpine Halo9 DecodeUTF7 Stack-based Buffer Overflow Remote Code Execution Vulnerability.

CVSS 3.1HIGH 8.0 Adjacent network No auth User interaction EPSS 0.00502 Published 2024-09-28 No fix listed CWE-121
Priority LOW 36

Alpine iLX-507 TIDAL Improper Certificate Validation Vulnerability.

CVSS 3.1HIGH 8.0 Adjacent network No auth User interaction EPSS 0.00153 Published 2025-08-01 No fix listed CWE-295
TI-2026-82078 CVE-2026-118607 · GHSA-534x-8vf3-m22c

Command injection in Alpine iLX-F511 diagapp

Priority LOW 34

Alpine iLX-F511 diagapp Command Injection Vulnerability.

CVSS 3.0MEDIUM 6.8 Physical No auth No interaction EPSS 0.00869 Published 2026-10-28 No fix listed CWE-78
Priority LOW 34

Alpine iLX-507 vCard Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability.

CVSS 3.0HIGH 7.4 Adjacent network Low privileges User interaction EPSS 0.00337 Published 2025-08-01 No fix listed CWE-121
Priority LOW 34

Alpine iLX-507 AVRCP Stack-based Buffer Overflow Remote Code Execution Vulnerability.

CVSS 3.0HIGH 7.4 Adjacent network Low privileges User interaction EPSS 0.00344 Published 2025-08-01 No fix listed CWE-121
Priority LOW 34

Alpine iLX-507 vCard Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability.

CVSS 3.0HIGH 7.4 Adjacent network Low privileges User interaction EPSS 0.00344 Published 2025-08-01 No fix listed CWE-121
TI-2024-15939 CVE-2024-23961 · GHSA-h37g-6773-5r89

OS command injection in Alpine Halo9

Priority LOW 34

Alpine Halo9 UPDM_wemCmdUpdFSpeDecomp Command Injection Remote Code Execution Vulnerability.

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.01026 Published 2024-09-28 No fix listed CWE-78
TI-2024-15912 CVE-2024-23924 · GHSA-xrh7-mhgj-f2r5

OS command injection in Alpine Halo9

Priority LOW 34

Alpine Halo9 UPDM_wemCmdCreatSHA256Hash Command Injection Remote Code Execution Vulnerability.

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.01026 Published 2024-09-28 No fix listed CWE-78
Priority LOW 32

Alpine iLX-507 CarPlay Stack-based Buffer Overflow Code Execution Vulnerability.

CVSS 3.0MEDIUM 6.8 Physical No auth No interaction EPSS 0.00286 Published 2025-08-01 No fix listed CWE-121
TI-2025-07755 CVE-2025-8473 · GHSA-99rf-9fx6-652g

OS command injection in Alpine iLX-507

Priority LOW 32

Alpine iLX-507 UPDM_wstpCBCUpdStart Command Injection Vulnerability.

CVSS 3.1MEDIUM 6.6 Physical No auth User interaction EPSS 0.00678 Published 2025-08-01 No fix listed CWE-78
TI-2024-15940 CVE-2024-23962 · GHSA-4pmj-qpm8-x7gv

Alpine Halo9 Missing Authentication

Priority LOW 31

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Alpine Halo9 devices.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00699 Published 2025-01-30 No fix listed CWE-200
Priority LOW 21

Alpine Halo9 Improper Verification of Cryptographic Signature Vulnerability.

CVSS 3.1MEDIUM 4.6 Physical No auth No interaction EPSS 0.00263 Published 2024-09-28 No fix listed CWE-347
Load more
Open these records in search →