Read the docs

Cnesty

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Cnesty records in CISA KEV

No Cnesty vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

3 records in Helpcom · all components

Priority MEDIUM 44

A vulnerability of Helpcom could allow an unauthenticated attacker to execute arbitrary command.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00864 Published 2021-06-29 Fixed in 10.0(2020.11) CWE-20
TI-2020-06362 CVE-2020-7856 · GHSA-w9pp-r77p-j4p3

Improper authentication in Cnesty Helpcom

Priority MEDIUM 44

A vulnerability of Helpcom could allow an unauthenticated attacker to execute arbitrary command.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00854 Published 2021-04-20 No fix listed CWE-287
TI-2020-06354 CVE-2020-7846 · GHSA-wvm5-q52j-8r24

Hard-coded credentials in Cnesty Helpcom

Priority MEDIUM 40

Helpcom before v10.0 contains a file download and execution vulnerability caused by storing hardcoded cryptographic key.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01064 Published 2021-02-24 Fixed in 10.0 CWE-321
Open these records in search →