Vendors / Cassia Networks Records 5 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 3
Exploited now Cassia Networks records in CISA KEV No Cassia Networks vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 78
In Cassia Gateway firmware XC1000_2.1.1.2303082218 and XC2000_2.1.1.2303090947, the queueUrl parameter in /bypass/config is not sanitized.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.61081 · Published 2024-01-10 · No fix listed CWE-77
Priority MEDIUM 41
An issue was discovered in Cassia Access Controller 2.1.1.2303271039.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01223 · Published 2023-10-27 · No fix listed CWE-287
Priority MEDIUM 40
An issue was discovered in Cassia Access Controller 2.1.1.2303271039.
CVSS 3.1 HIGH 8.8· Network · No auth · User interaction · EPSS 0.01083 · Published 2023-09-26 · No fix listed CWE-352
Priority LOW 34
An attacker may be able to use minify route with a relative path to view any file on the Cassia Networks Access Controller prior to 2.0.1.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00707 · Published 2022-10-14 · Fixed in 2.0.1 CWE-22
Priority LOW 26
Cassia Access controller before 2.1.1.2203171453, was discovered to have a unprivileged -information disclosure vulnerability that allows read-only users have the ability to enumerate all other users and discover e-mail…
CVSS 3.1 MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.01146 · Published 2023-05-11 · No fix listed CWE-732
Open these records in search → All records by CVSS severity
1 3 1 0 0
THREATIST.IORead the docs