EnGenius

Records15All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

EnGenius records in CISA KEV

No EnGenius vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Ews356-fit Firmware · all components

TI-2024-23914 CVE-2024-36061 · GHSA-v8h2-p73v-3whx

MEDIUM 51

EnGenius EWS356-FIT devices through 1.1.30 allow blind OS command injection.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01099 Published 2024-11-11 No fix listed CWE-78

TI-2024-21074 CVE-2024-31975 · GHSA-3x5w-67jh-3785

LOW 22

EnGenius EWS356-Fit devices through 1.1.30 allow a remote attacker to conduct stored XSS attacks via the Wi-Fi SSID parameters.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00379 Published 2024-10-30 No fix listed CWE-79