Vendors / Relyum Records 14 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 9
Exploited now Relyum records in CISA KEV No Relyum vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 43
An issue discovered in Relyum RELY-PCIe 22.2.1 and RELY-REC 23.1.0 allows for unauthorized password changes due to no check for current password.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00706 · Published 2023-12-13 · No fix listed CWE-522
Priority MEDIUM 42
RELY-PCIe v22.2.1 to v23.1.0 was discovered to contain a command injection vulnerability via the time_date function.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01 · Published 2024-09-11 · No fix listed CWE-77
Priority MEDIUM 42
RELY-PCIe v22.2.1 to v23.1.0 was discovered to contain a command injection vulnerability via the sys_conf function.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00975 · Published 2024-09-11 · No fix listed CWE-77
Priority MEDIUM 42
RELY-PCIe v22.2.1 to v23.1.0 was discovered to contain a command injection vulnerability via the sys_mgmt function.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00975 · Published 2024-09-11 · No fix listed CWE-77
Priority MEDIUM 41
RELY-PCIe v22.2.1 to v23.1.0 was discovered to contain a code injection vulnerability via the getParams function in phpinf.php.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00474 · Published 2024-09-11 · No fix listed CWE-77
Priority MEDIUM 41
An issue was discovered in Relyum RELY-PCIe 22.2.1 and RELY-REC 23.1.0 devices, allowing authenticated command injection through the web interface.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01514 · Published 2023-12-13 · No fix listed CWE-77
Priority MEDIUM 41
An issue discovered in Relyum RELY-PCIe 22.2.1 devices.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.0068 · Published 2023-12-13 · No fix listed CWE-862
Priority MEDIUM 40
RELY-PCIe v22.2.1 to v23.1.0 was discovered to contain incorrect access control in the mService function at phpinf.php.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00373 · Published 2024-09-11 · No fix listed CWE-284
Priority MEDIUM 40
Relyum RELY-PCIe 22.2.1 devices suffer from a system group misconfiguration, allowing read access to the central password hash file of the operating system.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00583 · Published 2023-12-13 · No fix listed CWE-284
Priority MEDIUM 40
Relyum RELY-PCIe 22.2.1 and RELY-REC 23.1.0 devices are susceptible to Cross Site Request Forgery (CSRF) attacks due to the absence of CSRF protection in the web interface.
CVSS 3.1 HIGH 8.8· Network · No auth · User interaction · EPSS 0.00302 · Published 2023-12-13 · No fix listed CWE-352
Priority LOW 27
An issue was discovered on Relyum RELY-PCIe 22.2.1 and RELY-REC 23.1.0 devices.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00406 · Published 2023-12-13 · No fix listed CWE-79
Priority LOW 27
An issue was discovered on Relyum RELY-PCIe 22.2.1 and RELY-REC 23.1.0 devices.
CVSS 3.1 MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.00492 · Published 2023-12-13 · No fix listed
Priority LOW 21
A stored cross-site scripting (XSS) vulnerability in the VLAN configuration of RELY-PCIe v22.2.1 to v23.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.
CVSS 3.1 MEDIUM 4.7· Network · No auth · User interaction · EPSS 0.0028 · Published 2024-09-11 · No fix listed CWE-79
Priority LOW 17
RELY-PCIe v22.2.1 to v23.1.0 does not set the Secure attribute for sensitive cookies in HTTPS sessions, which could cause the user agent to send those cookies in cleartext over an HTTP session.
CVSS 3.1 LOW 3.7· Network · No auth · No interaction · EPSS 0.00254 · Published 2024-09-11 · No fix listed CWE-732
Open these records in search → All records by CVSS severity
1 9 3 1 0
THREATIST.IORead the docs