Read the docs

JCT

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

JCT records in CISA KEV

No JCT vulnerabilities are listed in CISA KEV.

Records

4 records

TI-2025-04137 CVE-2025-4636 · GHSA-fjc6-ph8v-27j9

Local privilege escalation in JCT Airpointer

Priority LOW 35

Due to excessive privileges granted to the web user running the airpointer web platform, a malicious actor that gains control of the this user would be able to privilege escalate to the root user

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00165 Published 2025-05-30 No fix listed CWE-269
TI-2025-04134 CVE-2025-4633 · GHSA-gx9w-mmx8-h596

Default credentials in JCT Airpointer

Priority LOW 34

Default credentials were present in the web portal for Airpointer 2.4.107-2, allowing an unauthenticated malicious actor to log in via the web portal

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.0027 Published 2025-05-30 No fix listed CWE-798
TI-2025-04136 CVE-2025-4635 · GHSA-85x7-533r-gjfq

Remote code execution in JCT Airpointer

Priority LOW 30

A malicious user with administrative privileges in the web portal would be able to manipulate the Diagnostics module to obtain remote code execution on the local device as a low privileged user.

CVSS 3.1MEDIUM 6.6 Network High privileges No interaction EPSS 0.00444 Published 2025-05-30 No fix listed CWE-20
TI-2025-04135 CVE-2025-4634 · GHSA-67x9-8jxx-85f8

Local File Inclusion

Priority LOW 19

The web portal on airpointer 2.4.107-2 was vulnerable local file inclusion.

CVSS 3.1MEDIUM 4.1 Network High privileges No interaction EPSS 0.00291 Published 2025-05-30 No fix listed CWE-552
Open these records in search →