Ehang-io

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Ehang-io records in CISA KEV

No Ehang-io vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Nps 2 records MEDIUM

Records

2 records

TI-2022-19217 CVE-2022-40494 · GHSA-xfw6-m86r-mwwx

NPS before v0.26.10 was discovered to contain an authentication bypass vulnerability via…

MEDIUM 46

NPS before v0.26.10 was discovered to contain an authentication bypass vulnerability via constantly generating and sending the Auth key and Timestamp parameters.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02105 Published 2022-10-06 No fix listed CWE-287

TI-2019-11290 CVE-2019-15119 · GHSA-2vp2-8m5j-4rjx

lib/install/install.go in cnlh nps through 0.23.2 uses 0777 permissions for…

LOW 27

lib/install/install.go in cnlh nps through 0.23.2 uses 0777 permissions for /usr/local/bin/nps and/or /usr/bin/nps, leading to a file overwrite by a local user.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00955 Published 2019-08-16 Fixed in 0.23.2 CWE-732

Open these records in search →

Critical	1
High	0
Medium	1
Low	0
No CVSS	0