Vendors / IP-COM Records 21 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 18
CVSS high 3
Exploited now IP-COM records in CISA KEV No IP-COM vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 57
IP-COM EW9 V15.11.0.14(9732) was discovered to contain a command injection vulnerability in the cmd_get_ping_output function.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.05373 · Published 2022-12-13 · No fix listed CWE-78
Priority MEDIUM 48
IP-COM EW9 V15.11.0.14(9732) was discovered to contain a command injection vulnerability in the formSetDebugCfg function.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02885 · Published 2022-10-27 · No fix listed CWE-77
Priority LOW 35
IP-COM EW9 V15.11.0.14(9732) allows unauthenticated attackers to access sensitive information via the checkLoginUser, ate, telnet, version, setDebugCfg, and boot interfaces.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.0097 · Published 2022-10-27 · No fix listed
Priority LOW 35
IP-COM EW9 V15.11.0.14(9732) was discovered to contain a buffer overflow in the formSetDebugCfg function.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00947 · Published 2022-10-27 · No fix listed CWE-120
Priority LOW 34
An access control issue in the password reset page of IP-COM EW9 V15.11.0.14(9732) allows unauthenticated attackers to arbitrarily change the admin password.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00806 · Published 2022-10-27 · No fix listed
Open these records in search → All records by CVSS severity
18 3 0 0 0
THREATIST.IORead the docs