CarlinKit

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

CarlinKit records in CISA KEV

No CarlinKit vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

4 records

TI-2025-02417 CVE-2025-2765 · GHSA-2pwc-7gr8-9w97

LOW 38

CarlinKit CPC200-CCPA Wireless Hotspot Hard-Coded Credentials Authentication Bypass Vulnerability.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00409 Published 2025-04-23 No fix listed CWE-798

TI-2025-02416 CVE-2025-2764 · GHSA-mxxr-2fvg-xw43

LOW 36

CarlinKit CPC200-CCPA update.cgi Improper Verification of Cryptographic Signature Code Execution Vulnerability.

CVSS 3.0HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.00251 Published 2025-04-23 No fix listed CWE-347

TI-2025-02414 CVE-2025-2762 · GHSA-5m6v-fcw2-pgcq

LOW 35

CarlinKit CPC200-CCPA Missing Root of Trust Local Privilege Escalation Vulnerability.

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.00194 Published 2025-04-23 No fix listed CWE-1326

TI-2025-02415 CVE-2025-2763 · GHSA-gfww-4w9g-j3mr

LOW 31

CarlinKit CPC200-CCPA Improper Verification of Cryptographic Signature Code Execution Vulnerability.

CVSS 3.0MEDIUM 6.8 Physical No auth No interaction EPSS 0.00205 Published 2025-04-23 No fix listed CWE-347