Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
Panorama records in CISA KEVNo Panorama vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority MEDIUM 46
The digest generation function of NHIServiSignAdapter has not been verified for parameter’s length, which leads to a stack overflow loophole.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01978 · Published 2020-12-31 · No fix listed CWE-121
Priority MEDIUM 46
NHIServiSignAdapter fails to verify the length of digital credential files’ path which leads to a heap overflow loophole.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01978 · Published 2020-12-31 · No fix listed CWE-122
Priority LOW 33
The encryption function of NHIServiSignAdapter fail to verify the file path input by users.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00508 · Published 2020-12-31 · No fix listed CWE-311
