Vendors / Resiot Records 3 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 2
Exploited now Resiot records in CISA KEV No Resiot vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Records 3 records in Iot Platform And Lorawan Network Server · all components
Priority HIGH 73
Cross Site Request Forgery (CSRF) vulnerability in ResIOT ResIOT IOT Platform + LoRaWAN Network Server through 4.1.1000114 allows attackers to add new admin users to the platform or other unspecified impacts.
CVSS 3.1 HIGH 8.8· Network · No auth · User interaction · EPSS 0.00558 · Published 2022-10-13 · No fix listed CWE-352
Priority HIGH 67
SQL injection vulnerability in ResIOT IOT Platform + LoRaWAN Network Server through 4.1.1000114 via a crafted POST request to /ResiotQueryDBActive.
CVSS 3.1 HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00986 · Published 2022-10-13 · No fix listed CWE-89
Priority MEDIUM 58
Multiple Cross Site Scripting (XSS) vulnerabilities in ResIOT IOT Platform + LoRaWAN Network Server through 4.1.1000114 via the form fields.
CVSS 3.1 MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00551 · Published 2022-10-13 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
0 2 1 0 0
