Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

7 records

Vendor: Riello UPS Component: Netman 204 Firmware Clear all filters
TI-2024-08243 CVE-2024-8877 · GHSA-8g8m-p65c-g42p

SQL injection in Riello UPS Netman 204

Priority HIGH 78

Improper neutralization of special elements results in a SQL Injection vulnerability in Riello Netman 204.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.77265 Published 2024-09-24 No fix listed CWE-89
TI-2024-08244 CVE-2024-8878 · GHSA-52jr-7fqr-h29h

Unauthenticated Password Reset

Priority HIGH 82

The password recovery mechanism for the forgotten password in Riello Netman 204 allows an attacker to reset the admin password and take over control of the device.This issue affects Netman 204: through 4.05.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.01265 Published 2024-09-24 No fix listed CWE-640
TI-2022-23729 CVE-2022-47893 · GHSA-xp8c-vfh9-64v5

NetMan 204 Remote Code Execution

Priority MEDIUM 51

There is a remote code execution vulnerability that affects all versions of NetMan 204.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.01178 Published 2023-10-03 No fix listed CWE-434
TI-2022-23728 CVE-2022-47892 · GHSA-c8xr-gf3v-574p

Information disclosure in NetMan 204

Priority LOW 39

All versions of NetMan 204 could allow an unauthenticated remote attacker to read a file (config.cgi) containing sensitive information, like credentials.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00478 Published 2023-10-03 No fix listed CWE-200
TI-2022-23727 CVE-2022-47891 · GHSA-2jmg-wxp9-5qfc

Admin password reset in NetMan 204

Priority LOW 39

All versions of NetMan 204 allow an attacker that knows the MAC and serial number of the device to reset the administrator password via the legitimate recovery function.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00613 Published 2023-10-03 No fix listed CWE-798