Vendors / Northern.tech Records 15 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 4
Exploited now Northern.tech records in CISA KEV No Northern.tech vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 44
The iot-manager microservice 1.0.0 in Northern.tech Mender Enterprise before 3.2.2 allows SSRF because the Azure IoT Hub integration provides several SSRF primitives that can execute cross-tenant actions via internal API…
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01027 · Published 2022-04-28 · No fix listed CWE-918
Priority LOW 39
The Deviceconnect microservice through 1.3.0 in Northern.tech Mender Enterprise before 3.2.2.
CVSS 3.1 HIGH 8.8· Network · No auth · User interaction · EPSS 0.00481 · Published 2022-04-28 · No fix listed CWE-352
Priority LOW 30
Northern.tech Mender before 3.6.5 and 3.7.x before 3.7.5 has Incorrect Access Control.
CVSS 3.1 MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00262 · Published 2024-11-08 · No fix listed CWE-284
Priority LOW 19
The client in Northern.tech Mender 3.2.0, 3.2.1, and 3.2.2 has Incorrect Access Control.
CVSS 3.1 MEDIUM 4.3· Adjacent network · No auth · No interaction · EPSS 0.00229 · Published 2022-07-06 · No fix listed CWE-863
Open these records in search → All records by CVSS severity
1 4 10 0 0
