Read the docs

Nvki

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Nvki records in CISA KEV

No Nvki vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Intelligent Broadband Subscriber Gateway 3 records MEDIUM

Records

3 records

TI-2023-20791 CVE-2023-39809 · GHSA-5fvp-953q-q2rj

N.V.K.INTER CO., LTD.

Priority MEDIUM 52

N.V.K.INTER CO., LTD. (NVK) iBSG v3.5 was discovered to contain an OS command injection vulnerability via shell metacharacters in the system_hostname parameter at /manage/network-basic.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01493 Published 2023-08-21 No fix listed CWE-77
TI-2023-20790 CVE-2023-39808 · GHSA-62fj-4xw4-4wqj

N.V.K.INTER CO., LTD.

Priority MEDIUM 50

N.V.K.INTER CO., LTD. (NVK) iBSG v3.5 was discovered to contain a hardcoded root password that allows attackers to login with root privileges via the SSH service.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00645 Published 2023-08-21 No fix listed CWE-798
TI-2023-20789 CVE-2023-39807 · GHSA-jv2j-mm55-5fw8

N.V.K.INTER CO., LTD.

Priority MEDIUM 50

N.V.K.INTER CO., LTD. (NVK) iBSG v3.5 was discovered to contain a SQL injection vulnerability via the a_passwd parameter at /portal/user-register.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0062 Published 2023-08-21 No fix listed CWE-89
Open these records in search →