Read the docs

Zultys

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Zultys records in CISA KEV

No Zultys vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

3 records in Mx-virtual Firmware · all components

Priority MEDIUM 44

An authentication bypass in Zultys MX-SE, MX-SE II, MX-E, MX-Virtual, MX250, and MX30 with firmware versions prior to 17.0.10 patch 17161 and 16.04 patch 16109 allows an unauthenticated attacker to obtain an administrati…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00924 Published 2023-12-08 No fix listed CWE-287
Priority MEDIUM 41

A SQL injection vulnerability in Zultys MX-SE, MX-SE II, MX-E, MX-Virtual, MX250, and MX30 with firmware versions prior to 17.0.10 patch 17161 and 16.04 patch 16109 allows an authenticated attacker to execute arbitrary S…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00687 Published 2023-12-08 No fix listed CWE-89
Priority LOW 36

An OS command injection vulnerability in Zultys MX-SE, MX-SE II, MX-E, MX-Virtual, MX250, and MX30 with firmware versions prior to 17.0.10 patch 17161 and 16.04 patch 16109 allows an administrator to execute arbitrary OS…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01988 Published 2023-12-08 No fix listed CWE-78
Open these records in search →