Ikuai8

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Ikuai8 records in CISA KEV

No Ikuai8 vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

3 records

TI-2023-17416 CVE-2023-34849 · GHSA-924w-w384-3gf2

HIGH 82

An unauthorized command injection vulnerability exists in the ActionLogin function of the webman.lua file in Ikuai router OS through 3.7.1.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02863 Published 2023-06-29 No fix listed CWE-77

TI-2022-19201 CVE-2022-40469 · GHSA-5v6v-qhhf-hv9g

HIGH 73

iKuai OS v3.6.7 was discovered to contain an authenticated remote code execution (RCE) vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.03141 Published 2022-10-12 No fix listed CWE-94

TI-2021-09331 CVE-2021-28075 · GHSA-mcjw-9v89-95jc

LOW 35

iKuaiOS 3.4.8 Build 202012291059 has an arbitrary file download vulnerability, which can be exploited by attackers to obtain sensitive information.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01052 Published 2021-04-06 No fix listed