RONDS

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

RONDS records in CISA KEV

No RONDS vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Equipment Predictive Maintenance 2 records MEDIUM

Records

2 records in Equipment Predictive Maintenance · all components

TI-2022-02683 CVE-2022-2893 · GHSA-q63c-hwh7-h8pw

Path traversal in RONDS Equipment Predictive Maintenance Solution

MEDIUM 43

RONDS EPM version 1.19.5 does not properly validate the filename parameter, which could allow an unauthorized user to specify file paths and download files.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00721 Published 2023-01-17 No fix listed CWE-22

TI-2022-02852 CVE-2022-3091 · GHSA-96f5-4j7x-gc4x

Information disclosure in RONDS Equipment Predictive Maintenance Solution

MEDIUM 40

RONDS EPM version 1.19.5 has a vulnerability in which a function could allow unauthenticated users to leak credentials.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00646 Published 2023-01-17 No fix listed CWE-200

Open these records in search →

Critical	0
High	2
Medium	0
Low	0
No CVSS	0