Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

7 records

TI-2024-15941 CVE-2024-23963 · GHSA-5235-m374-99w3

Alpine Halo9 Stack-based Buffer Overflow

Priority LOW 37

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine Halo9 devices.

CVSS 3.1HIGH 8.0 Adjacent network No auth User interaction EPSS 0.00474 Published 2025-01-30 No fix listed CWE-94
TI-2024-15940 CVE-2024-23962 · GHSA-4pmj-qpm8-x7gv

Alpine Halo9 Missing Authentication

Priority LOW 31

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Alpine Halo9 devices.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00699 Published 2025-01-30 No fix listed CWE-200
TI-2024-15911 CVE-2024-23923 · GHSA-4grv-37wf-jg36

Use after free in Alpine Halo9

Priority MEDIUM 41

Alpine Halo9 prh_l2_sar_data_ind Use-After-Free Remote Code Execution Vulnerability.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00789 Published 2024-09-28 No fix listed CWE-416
Priority LOW 21

Alpine Halo9 Improper Verification of Cryptographic Signature Vulnerability.

CVSS 3.1MEDIUM 4.6 Physical No auth No interaction EPSS 0.00263 Published 2024-09-28 No fix listed CWE-347
TI-2024-15912 CVE-2024-23924 · GHSA-xrh7-mhgj-f2r5

OS command injection in Alpine Halo9

Priority LOW 34

Alpine Halo9 UPDM_wemCmdCreatSHA256Hash Command Injection Remote Code Execution Vulnerability.

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.01026 Published 2024-09-28 No fix listed CWE-78
TI-2024-15939 CVE-2024-23961 · GHSA-h37g-6773-5r89

OS command injection in Alpine Halo9

Priority LOW 34

Alpine Halo9 UPDM_wemCmdUpdFSpeDecomp Command Injection Remote Code Execution Vulnerability.

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.01026 Published 2024-09-28 No fix listed CWE-78
TI-2024-15918 CVE-2024-23935 · GHSA-jh62-xx57-p239

Stack-based buffer overflow in Alpine Halo9

Priority LOW 37

Alpine Halo9 DecodeUTF7 Stack-based Buffer Overflow Remote Code Execution Vulnerability.

CVSS 3.1HIGH 8.0 Adjacent network No auth User interaction EPSS 0.00502 Published 2024-09-28 No fix listed CWE-121