Read the docs

Amino

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Amino records in CISA KEV

No Amino vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

5 records in Kami7b Firmware · all components

Priority MEDIUM 49

Command Injection in EntoneWebEngine in Amino Communications AK45x series, AK5xx series, AK65x series, Aria6xx series, Aria7/AK7Xx series and Kami7B allows authenticated remote attackers to execute arbitrary commands wit…

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.04172 Published 2020-12-29 No fix listed CWE-74
Priority MEDIUM 47

Use of Hard-coded Credentials in EntoneWebEngine in Amino Communications AK45x series, AK5xx series, AK65x series, Aria6xx series, Aria7/AK7Xx series and Kami7B allows remote attackers to retrieve and modify the device s…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0252 Published 2020-12-29 No fix listed CWE-798
Priority MEDIUM 40

Command Injection in the CPE WAN Management Protocol (CWMP) registration in Amino Communications AK45x series, AK5xx series, AK65x series, Aria6xx series, Aria7/AK7Xx series and Kami7B allows man-in-the-middle attackers…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.02804 Published 2020-12-29 No fix listed CWE-78
Priority LOW 20

Use of a Hard-coded Password in VNCserver in Amino Communications AK45x series, AK5xx series, AK65x series, Aria6xx series, Aria7/AK7Xx series and Kami7B allows local attackers to view and interact with the video output…

CVSS 3.1MEDIUM 4.4 Local Low privileges No interaction EPSS 0.00292 Published 2020-12-29 No fix listed CWE-798
Open these records in search →