Vendors / Helmholz Records 77 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 3
CVSS high 57
Exploited now Helmholz records in CISA KEV No Helmholz vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 52
An unauthenticated remote attacker can execute OS commands via UDP on the device due to missing authentication.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01532 · Published 2024-10-15 · No fix listed CWE-306
Priority MEDIUM 50
The devices contain two hard coded user accounts with hardcoded passwords that allow an unauthenticated remote attacker for full control of the affected devices.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.008 · Published 2024-10-15 · No fix listed CWE-798
Priority MEDIUM 40
An unauthenticated remote attacker can get read access to files in the "/tmp" directory due to missing authentication.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00626 · Published 2024-10-15 · No fix listed CWE-306
Priority LOW 38
An unauthenticated local attacker can gain admin privileges by deploying a config file due to improper input validation.
CVSS 3.1 HIGH 8.4· Local · No auth · No interaction · EPSS 0.0031 · Published 2024-10-15 · No fix listed CWE-94
Priority LOW 37
An unauthenticated local attacker can decrypt the devices config file and therefore compromise the device due to a weak implementation of the encryption used.
CVSS 3.1 HIGH 8.4· Local · No auth · No interaction · EPSS 0.00093 · Published 2024-10-15 · No fix listed CWE-261
Open these records in search → All records by CVSS severity
3 57 17 0 0
THREATIST.IORead the docs