Read the docs

Reedos Software Solutions

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

Reedos Software Solutions records in CISA KEV

No Reedos Software Solutions vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Aim-star 5 records MEDIUM

Records

5 records in Aim-star · all components

TI-2024-30755 CVE-2024-45788 · GHSA-852g-3f6p-43mm

No Rate Limiting Vulnerability

Priority MEDIUM 44

This vulnerability exists in Reedos aiM-Star version 2.0.1 due to missing rate limiting on OTP requests in certain API endpoints.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00498 Published 2024-09-11 No fix listed CWE-799
TI-2024-30757 CVE-2024-45790 · GHSA-7x9g-pvv2-c542

User Enumeration vulnerability

Priority MEDIUM 41

This vulnerability exists in Reedos aiM-Star version 2.0.1 due to missing restrictions for excessive failed authentication attempts on its API based login.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00564 Published 2024-09-11 No fix listed CWE-307
TI-2024-30756 CVE-2024-45789 · GHSA-wmq4-q8rm-8vp5

Parameter Tampering Vulnerability

Priority LOW 36

This vulnerability exists in Reedos aiM-Star version 2.0.1 due to improper validation of the ‘mode’ parameter in the API endpoint used during the registration process.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00219 Published 2024-09-11 No fix listed CWE-354
Open these records in search →