Vendors / Kron Records 5 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 3
Exploited now Kron records in CISA KEV No Kron vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 41
Improper Input Validation, Authorization Bypass Through User-Controlled Key vulnerability in Kron Tech Single Connect on Windows allows Privilege Abuse.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00712 · Published 2023-02-17 · No fix listed CWE-639
Priority MEDIUM 40
Single Connect does not perform an authorization check when using the sc-reports-ui" module.
CVSS 3.1 HIGH 8.6· Network · No auth · No interaction · EPSS 0.01187 · Published 2022-01-27 · Fixed in 2.16 CWE-862
Priority LOW 35
Single Connect does not perform an authorization check when using the "sc-assigned-credential-ui" module.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00918 · Published 2022-01-27 · Fixed in 2.16 CWE-862
Priority LOW 26
Single Connect does not perform an authorization check when using the "sc-diagnostic-ui" module.
CVSS 3.1 MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00993 · Published 2022-01-27 · Fixed in 2.16 CWE-862
Priority LOW 26
Single Connect does not perform an authorization check when using the "log-monitor" module.
CVSS 3.1 MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00993 · Published 2022-01-27 · Fixed in 2.16 CWE-862
Open these records in search → All records by CVSS severity
0 3 2 0 0
THREATIST.IORead the docs