Qolsys, Inc.

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Qolsys, Inc. records in CISA KEV

No Qolsys, Inc. vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Iq Panel 2 records MEDIUM

Records

3 records

TI-2015-05101 CVE-2015-6032 · GHSA-7w76-g22v-gxpg

Qolsys IQ Panel (aka QOL) before 1.5.1 has hardcoded cryptographic keys, which allows…

MEDIUM 46

Qolsys IQ Panel (aka QOL) before 1.5.1 has hardcoded cryptographic keys, which allows remote attackers to create digital signatures for code by leveraging knowledge of a key from a different installation.

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.0328 Published 2015-10-31 No fix listed CWE-255

TI-2015-05102 CVE-2015-6033 · GHSA-pj39-g3x7-52h4

Qolsys IQ Panel (aka QOL) before 1.5.1 does not verify the digital signatures of software…

MEDIUM 45

Qolsys IQ Panel (aka QOL) before 1.5.1 does not verify the digital signatures of software updates, which allows man-in-the-middle attackers to bypass intended access restrictions via a modified update.

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.02392 Published 2015-10-31 No fix listed CWE-310

TI-2024-00217 CVE-2024-0242 · GHSA-mc3m-gj6r-2fhp

Unauthorized access to settings in Qolsys IQ Panel 4 and IQ4 Hub

MEDIUM 43

Under certain circumstances IQ Panel4 and IQ4 Hub panel software prior to version 4.4.2 could allow unauthorized access to settings.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00585 Published 2024-02-08 Fixed in 4.4.2 CWE-200

Open these records in search →

Critical	3
High	0
Medium	0
Low	0
No CVSS	0