Ericom

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Ericom records in CISA KEV

No Ericom vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Access Server 1 record LOW Accessnow Server 1 record HIGH Powerterm Webconnect 1 record LOW

Records

3 records

TI-2014-03186 CVE-2014-3913 · GHSA-fh6q-fh77-8r3p

Stack-based buffer overflow in AccessServer32.exe in Ericom AccessNow Server allows…

HIGH 77

Stack-based buffer overflow in AccessServer32.exe in Ericom AccessNow Server allows remote attackers to execute arbitrary code via a request for a non-existent file.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.6086 Published 2014-06-04 No fix listed CWE-119

TI-2022-11697 CVE-2022-29152 · GHSA-f388-xh2q-wcwr

The Ericom PowerTerm WebConnect 6.0 login portal can unsafely write an XSS payload from…

LOW 28

The Ericom PowerTerm WebConnect 6.0 login portal can unsafely write an XSS payload from the AppPortal cookie into the page.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00568 Published 2022-04-28 No fix listed CWE-79

TI-2020-15030 CVE-2020-24548 · GHSA-4f8m-hgv8-w5q2

Ericom Access Server 9.2.0 (for AccessNow and Ericom Blaze) allows SSRF to make outbound…

LOW 27

Ericom Access Server 9.2.0 (for AccessNow and Ericom Blaze) allows SSRF to make outbound WebSocket connection requests on arbitrary TCP ports, and provides "Cannot connect to" error messages to inform the attacker about…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01689 Published 2020-08-26 No fix listed CWE-918

Open these records in search →

Critical	1
High	0
Medium	2
Low	0
No CVSS	0