Read the docs

ORing

Records8All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9

Exploited now

ORing records in CISA KEV

No ORing vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Iap-420 Firmware 8 records HIGH Iap-420+ Firmware 1 record HIGH

Records

8 records

TI-2022-02958 CVE-2022-3203 · GHSA-4hvx-h8mx-pjgh

ORing net IAP-420(+) Hidden Functionality

Priority HIGH 82

On ORing net IAP-420(+) with FW version 2.0m a telnet server is enabled by default and cannot permanently be disabled.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01035 Published 2022-10-21 No fix listed CWE-912
TI-2024-36874 CVE-2024-55547 · GHSA-52wq-8j3g-pvxx

Remote Command Execution via SNMP

Priority HIGH 79

SNMP objects in NET-SNMP used in ORing IAP-420 allows Command Injection.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.17394 Published 2024-12-10 No fix listed CWE-77
TI-2024-36871 CVE-2024-55544 · GHSA-3q23-2j2r-mmw3

Authenticated command injection in ORing IAP-420

Priority HIGH 79

Missing input validation in the ORing IAP-420 web-interface allows authenticated Command Injections on OS level.This issue affects IAP-420 version 2.01e and below.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.12386 Published 2024-12-10 No fix listed CWE-77
TI-2024-05027 CVE-2024-5411

Command injection in ORing IAP-420

Priority HIGH 73

Missing input validation and OS command integration of the input in the ORing IAP-420 web-interface allows authenticated command injection.This issue affects IAP-420 version 2.01e and below.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.234 Published 2024-05-28 No fix listed CWE-78
TI-2024-36873 CVE-2024-55546 · GHSA-fcx8-3xwg-jjq7

Stored cross-site scripting in ORing IAP-420

Priority HIGH 70

Missing input validation in the ORing IAP-420 web-interface allows stored Cross-Site Scripting (XSS).This issue affects IAP-420 version 2.01e and below.

CVSS 4.0HIGH 7.1 Network No auth User interaction EPSS 0.0029 Published 2024-12-10 No fix listed CWE-79
TI-2024-36872 CVE-2024-55545 · GHSA-5c75-q5qv-27px

Reflected cross-site scripting in ORing IAP-420

Priority HIGH 70

Missing input validation in the ORing IAP-420 web-interface allows Cross-Site Scripting (XSS).This issue affects IAP-420 version 2.01e and below.

CVSS 4.0HIGH 7.1 Network No auth User interaction EPSS 0.00307 Published 2024-12-10 No fix listed CWE-79
TI-2024-36875 CVE-2024-55548 · GHSA-f2r4-3q83-4c5x

Denial of service in ORing IAP-420

Priority MEDIUM 64

Improper check of password character lenght in ORing IAP-420 allows a forced deadlock.

CVSS 4.0MEDIUM 6.9 Network High privileges No interaction EPSS 0.00481 Published 2024-12-10 No fix listed CWE-703
TI-2024-05026 CVE-2024-5410

Stored cross-site scripting in ORing IAP-420

Priority MEDIUM 51

Missing input validation in the ORing IAP-420 web-interface allows stored Cross-Site Scripting (XSS).This issue affects IAP-420 version 2.01e and below.

CVSS 4.0HIGH 8.3 Network No auth User interaction EPSS 0.13737 Published 2024-05-28 No fix listed CWE-79
Open these records in search →