Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Zultys Component: Mx-virtual Firmware Clear all filters
TI-2023-23446 CVE-2023-43744 · GHSA-cx8g-cw67-m22j

An OS command injection vulnerability in Zultys MX-SE, MX-SE II, MX-E, MX-Virtual, MX250…

Priority LOW 36

An OS command injection vulnerability in Zultys MX-SE, MX-SE II, MX-E, MX-Virtual, MX250, and MX30 with firmware versions prior to 17.0.10 patch 17161 and 16.04 patch 16109 allows an administrator to execute arbitrary OS…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01988 Published 2023-12-08 No fix listed CWE-78
TI-2023-23445 CVE-2023-43743 · GHSA-52pm-cqv2-ffrx

A SQL injection vulnerability in Zultys MX-SE, MX-SE II, MX-E, MX-Virtual, MX250, and…

Priority MEDIUM 41

A SQL injection vulnerability in Zultys MX-SE, MX-SE II, MX-E, MX-Virtual, MX250, and MX30 with firmware versions prior to 17.0.10 patch 17161 and 16.04 patch 16109 allows an authenticated attacker to execute arbitrary S…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00687 Published 2023-12-08 No fix listed CWE-89
TI-2023-23444 CVE-2023-43742 · GHSA-fvq3-8fqq-2cvh

An authentication bypass in Zultys MX-SE, MX-SE II, MX-E, MX-Virtual, MX250, and MX30…

Priority MEDIUM 44

An authentication bypass in Zultys MX-SE, MX-SE II, MX-E, MX-Virtual, MX250, and MX30 with firmware versions prior to 17.0.10 patch 17161 and 16.04 patch 16109 allows an unauthenticated attacker to obtain an administrati…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00924 Published 2023-12-08 No fix listed CWE-287