EnGenius

Records15All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

EnGenius records in CISA KEV

No EnGenius vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Enh1350ext Firmware 9 records MEDIUM Ens500-ac Firmware 9 records MEDIUM Ens620ext Firmware 9 records MEDIUM Ews356-fit Firmware 2 records MEDIUM Enh500 Firmware 1 record MEDIUM Epg5000 Firmware 1 record HIGH Esr1200 Firmware 1 record HIGH Esr1750 Firmware 1 record HIGH

Records

15 records

TI-2025-24204 CVE-2025-34035 · GHSA-xv32-fpqh-v67r

EnGenius EnShare IoT Gigabit Cloud Service Command Injection

HIGH 82

An OS command injection vulnerability exists in EnGenius EnShare Cloud Service version 1.4.11 and earlier.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.24839 Published 2025-06-24 No fix listed CWE-78

TI-2025-20774 CVE-2025-28371 · GHSA-8p9j-879p-799j

EnGenius ENH500 AP 2T2R V3.0 FW3.7.22 is vulnerable to Incorrect Access Control via the…

MEDIUM 62

EnGenius ENH500 AP 2T2R V3.0 FW3.7.22 is vulnerable to Incorrect Access Control via the password change function.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00495 Published 2025-05-19 No fix listed CWE-284

TI-2024-10805 CVE-2024-11659 · GHSA-7rhm-f5w2-xhpm

EnGenius ENH1350EXT/ENS500-AC/ENS620EXT diag_iperf command injection

MEDIUM 56

A vulnerability was found in EnGenius ENH1350EXT, ENS500-AC and ENS620EXT up to 20241118 and classified as critical.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.29105 Published 2024-11-25 No fix listed CWE-74

TI-2024-10804 CVE-2024-11658 · GHSA-w5jp-mx9h-36w9

EnGenius ENH1350EXT/ENS500-AC/ENS620EXT ajax_getChannelList command injection

MEDIUM 56

A vulnerability has been found in EnGenius ENH1350EXT, ENS500-AC and ENS620EXT up to 20241118 and classified as critical.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.29105 Published 2024-11-25 No fix listed CWE-74

TI-2024-10803 CVE-2024-11657 · GHSA-c2mv-vx32-cw2p

EnGenius ENH1350EXT/ENS500-AC/ENS620EXT diag_nslookup command injection

MEDIUM 56

A vulnerability, which was classified as critical, was found in EnGenius ENH1350EXT, ENS500-AC and ENS620EXT up to 20241118.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.29105 Published 2024-11-25 No fix listed CWE-74

TI-2024-10802 CVE-2024-11656 · GHSA-cg8c-xfw6-pwwg

EnGenius ENH1350EXT/ENS500-AC/ENS620EXT diag_ping6 command injection

MEDIUM 56

A vulnerability, which was classified as critical, has been found in EnGenius ENH1350EXT, ENS500-AC and ENS620EXT up to 20241118.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.28766 Published 2024-11-25 No fix listed CWE-74

TI-2024-10801 CVE-2024-11655 · GHSA-65ww-rp43-h985

EnGenius ENH1350EXT/ENS500-AC/ENS620EXT diag_pinginterface command injection

MEDIUM 56

A vulnerability classified as critical was found in EnGenius ENH1350EXT, ENS500-AC and ENS620EXT up to 20241118.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.28766 Published 2024-11-25 No fix listed CWE-74

TI-2024-10800 CVE-2024-11654 · GHSA-85wm-rqrm-4w6x

EnGenius ENH1350EXT/ENS500-AC/ENS620EXT diag_traceroute6 command injection

MEDIUM 56

A vulnerability classified as critical has been found in EnGenius ENH1350EXT, ENS500-AC and ENS620EXT up to 20241118.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.29105 Published 2024-11-25 No fix listed CWE-74

TI-2024-10799 CVE-2024-11653 · GHSA-wxxp-2pwp-2vhg

EnGenius ENH1350EXT/ENS500-AC/ENS620EXT diag_traceroute command injection

MEDIUM 56

A vulnerability was found in EnGenius ENH1350EXT, ENS500-AC and ENS620EXT up to 20241118.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.29105 Published 2024-11-25 No fix listed CWE-74

TI-2024-10798 CVE-2024-11652 · GHSA-prc6-6v5h-g8v2

EnGenius ENH1350EXT/ENS500-AC/ENS620EXT sn_https command injection

MEDIUM 56

A vulnerability was found in EnGenius ENH1350EXT, ENS500-AC and ENS620EXT up to 20241118.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.30206 Published 2024-11-25 No fix listed CWE-74

TI-2024-10797 CVE-2024-11651 · GHSA-6w7h-f5rh-9fhg

EnGenius ENH1350EXT/ENS500-AC/ENS620EXT wifi_schedule command injection

MEDIUM 56

A vulnerability was found in EnGenius ENH1350EXT, ENS500-AC and ENS620EXT up to 20241118.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.27428 Published 2024-11-25 No fix listed CWE-74

TI-2024-23914 CVE-2024-36061 · GHSA-v8h2-p73v-3whx

EnGenius EWS356-FIT devices through 1.1.30 allow blind OS command injection.

MEDIUM 51

EnGenius EWS356-FIT devices through 1.1.30 allow blind OS command injection.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01099 Published 2024-11-11 No fix listed CWE-78

TI-2019-08476 CVE-2019-11353 · GHSA-phgg-8q44-65j2

The EnGenius EWS660AP router with firmware 2.0.284 allows an attacker to execute…

MEDIUM 48

The EnGenius EWS660AP router with firmware 2.0.284 allows an attacker to execute arbitrary commands using the built-in ping and traceroute utilities by using different payloads and injecting multiple parameters.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03067 Published 2019-05-09 No fix listed CWE-78

TI-2024-21075 CVE-2024-31976 · GHSA-m7vh-7qm6-rq42

EnGenius EWS356-FIR 1.1.30 and earlier devices allow a remote attacker to execute…

LOW 39

EnGenius EWS356-FIR 1.1.30 and earlier devices allow a remote attacker to execute arbitrary OS commands via the Controller connectivity parameter.

CVSS 3.1HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.00992 Published 2024-11-27 No fix listed CWE-78

TI-2024-21074 CVE-2024-31975 · GHSA-3x5w-67jh-3785

EnGenius EWS356-Fit devices through 1.1.30 allow a remote attacker to conduct stored XSS…

LOW 22

EnGenius EWS356-Fit devices through 1.1.30 allow a remote attacker to conduct stored XSS attacks via the Wi-Fi SSID parameters.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00379 Published 2024-10-30 No fix listed CWE-79

Open these records in search →