Vendors / Ericsson-LG Records 5 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 2
CVSS high 2
Exploited now Ericsson-LG records in CISA KEV No Ericsson-LG vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 56
The Ericsson-LG iPECS NMS A.1Ac web application uses incorrect access control mechanisms.
CVSS 3.0 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.12543 · Published 2018-04-22 · No fix listed CWE-732
Priority MEDIUM 49
The Ericsson-LG iPECS NMS A.1Ac login portal has a SQL injection vulnerability in the User ID and password fields that allows users to bypass the login page and execute remote code on the operating system.
CVSS 3.0 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.03904 · Published 2018-04-22 · No fix listed CWE-89
Priority MEDIUM 47
Ericsson-LG iPECS NMS 30M allows directory traversal via ipecs-cm/download?filename=../ URIs.
CVSS 3.0 HIGH 7.5· Network · No auth · No interaction · EPSS 0.12693 · Published 2018-08-15 · No fix listed CWE-22
Priority MEDIUM 47
The Ericsson-LG iPECS NMS A.1Ac web application discloses sensitive information such as the NMS admin credentials and the PostgreSQL database credentials to logged-in users via the responses to certain HTTP POST requests…
CVSS 3.0 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.06289 · Published 2018-04-22 · No fix listed CWE-522
Priority LOW 31
A vulnerability in the web-based management interface of iPECS could allow an authenticated, remote attacker to get administrator permission.
CVSS 3.1 MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.01018 · Published 2020-08-25 · No fix listed CWE-267
Open these records in search → All records by CVSS severity
2 2 1 0 0
THREATIST.IORead the docs