Raritan

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Raritan records in CISA KEV

No Raritan vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Commandcenter Secure Gateway 1 record MEDIUM Dominion Kx Ii-101 Firmware 1 record LOW Dominion Sx16 Firmware 1 record LOW Dominion Sx32 Firmware 1 record LOW Dominion Sx4 Firmware 1 record LOW Dominion Sx8 Firmware 1 record LOW Dominion Sxa-48 Firmware 1 record LOW Dpxr20a-16 1 record MEDIUM

Records

5 records

TI-2014-02365 CVE-2014-2955 · GHSA-7x69-82vj-v63v

Raritan PX before 1.5.11 on DPXR20A-16 devices allows remote attackers to bypass…

MEDIUM 48

Raritan PX before 1.5.11 on DPXR20A-16 devices allows remote attackers to bypass authentication and execute arbitrary IPMI commands by using cipher suite 0 (aka cipher zero) and an arbitrary password.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.02774 Published 2014-07-14 No fix listed CWE-287

TI-2018-14691 CVE-2018-20687 · GHSA-v65r-3m4g-37fx

An XML external entity (XXE) vulnerability in CommandCenterWebServices/.*?wsdl in Raritan…

MEDIUM 47

An XML external entity (XXE) vulnerability in CommandCenterWebServices/.*?wsdl in Raritan CommandCenter Secure Gateway before 8.0.0 allows remote unauthenticated users to read arbitrary files or conduct server-side reque…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02528 Published 2019-11-18 No fix listed CWE-611

TI-2014-03174 CVE-2014-3901 · GHSA-f53w-cccm-pmf8

Raritan Japan Dominion KX2-101 switches before 2 allow remote attackers to cause a denial…

LOW 38

Raritan Japan Dominion KX2-101 switches before 2 allow remote attackers to cause a denial of service (device hang) via a crafted packet.

CVSS 2.0HIGH 7.8 Network No auth Interaction — EPSS 0.02271 Published 2014-08-12 No fix listed

TI-2014-07388 CVE-2014-9095 · GHSA-grgr-xcwq-f47f

Multiple SQL injection vulnerabilities in Raritan Power IQ 4.1.0 and 4.2.1 allow remote…

LOW 37

Multiple SQL injection vulnerabilities in Raritan Power IQ 4.1.0 and 4.2.1 allow remote attackers to execute arbitrary SQL commands via the (1) sort or (2) dir parameter to license/records.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02348 Published 2014-11-26 No fix listed CWE-89

TI-2005-02017 CVE-2005-2136 · GHSA-5hmj-phhp-xxgh

Raritan Dominion SX (DSX) Console Servers DSX16, DSX32, DSX4, DSX8, and DSXA-48 set (1)…

LOW 22

Raritan Dominion SX (DSX) Console Servers DSX16, DSX32, DSX4, DSX8, and DSXA-48 set (1) world-readable permissions for /etc/shadow and (2) world-writable permissions for /bin/busybox, which allows local users to obtain h…

CVSS 2.0MEDIUM 4.6 Local No auth Interaction — EPSS 0.00586 Published 2005-07-05 No fix listed CWE-863

Open these records in search →

Critical	2
High	2
Medium	1
Low	0
No CVSS	0