Vendors / Mesa Labs Records 5 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 4
CVSS high 1
Exploited now Mesa Labs records in CISA KEV No Mesa Labs vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 48
Mesa Labs AmegaView Versions 3.0 and prior has a command injection vulnerability that can be exploited to execute commands in the web server.
CVSS 3.1 CRITICAL 9.9· Network · Low privileges · No interaction · EPSS 0.03172 · Published 2021-12-21 · No fix listed CWE-77
Priority MEDIUM 47
Mesa Labs AmegaView version 3.0 is vulnerable to a command injection, which may allow an attacker to remotely execute arbitrary code.
CVSS 3.1 CRITICAL 10.0· Network · No auth · No interaction · EPSS 0.02363 · Published 2021-12-21 · No fix listed CWE-77
Priority MEDIUM 44
Mesa Labs AmegaView Versions 3.0 uses default cookies that could be set to bypass authentication to the web application, which may allow an attacker to gain access.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01046 · Published 2021-12-21 · No fix listed CWE-288
Priority MEDIUM 44
Mesa Labs AmegaView Versions 3.0 and prior’s passcode is generated by an easily reversible algorithm, which may allow an attacker to gain access to the device.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00854 · Published 2021-12-21 · No fix listed CWE-287
Priority LOW 34
Mesa Labs AmegaView Versions 3.0 and prior has insecure file permissions that could be exploited to escalate privileges on the device.
CVSS 3.1 HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00231 · Published 2021-12-21 · No fix listed CWE-269
Open these records in search → All records by CVSS severity
4 1 0 0 0
THREATIST.IORead the docs