Elsight

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Elsight records in CISA KEV

No Elsight vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

3 records

TI-2024-30328 CVE-2024-45252 · GHSA-m98m-c6v8-v5rm

MEDIUM 51

Elsight – CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01007 Published 2024-10-06 Fixed in Upgrade to version 11.9.4.0 CWE-78

TI-2024-30327 CVE-2024-45251 · GHSA-hpxw-q2cf-3qx5

MEDIUM 51

Elsight – CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01007 Published 2024-10-06 Fixed in Upgrade to version 11.9.4.0 CWE-78

TI-2022-17025 CVE-2022-36784 · GHSA-95hr-886r-52mf

MEDIUM 51

Elsight – Elsight Halo Remote Code Execution (RCE) Elsight Halo web panel allows us to perform connection validation.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01161 Published 2022-11-17 Fixed in Update to version 10.6.1 CWE-20