Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Cellopoint Component: Cellos Clear all filters
TI-2020-13151 CVE-2020-17385 · GHSA-g45j-3ccj-357x

Cellopoint CelloOS - Unauthenticated Arbitrary File Disclosure

Priority LOW 36

Cellopoint CelloOS v4.1.10 Build 20190922 does not validate URL inputted properly, which allows unauthorized user to launch Path Traversal attack and access arbitrate file on the system.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01602 Published 2020-08-25 No fix listed CWE-22
TI-2020-13150 CVE-2020-17384 · GHSA-j57q-8f2v-q7xh

Cellopoint CelloOS - Remote Command Execution (RCE)

Priority LOW 35

Cellopoint CelloOS v4.1.10 Build 20190922 does not validate URL inputted properly.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01927 Published 2020-08-25 No fix listed CWE-78