Vulnerabilities

TI-2023-11163 CVE-2023-25909 · GHSA-5wfp-vx7w-jx9r

HGiga Inc. OAKlouds - Arbitrary File Upload

MEDIUM 51

HGiga OAKlouds file uploading function does not restrict upload of file with dangerous type.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00942 Published 2023-03-27 No fix listed CWE-434

TI-2022-17825 CVE-2022-38118 · GHSA-vp2j-mcvq-w3mr

MEDIUM 41

OAKlouds Portal website’s Meeting Room has insufficient validation for user input.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01708 Published 2022-08-30 No fix listed CWE-89

TI-2021-15673 CVE-2021-37913 · GHSA-r586-r9hc-jwq2

MEDIUM 47

The HGiga OAKlouds mobile portal does not filter special characters of the IPv6 Gateway parameter of the network interface card setting page.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02832 Published 2021-09-15 No fix listed CWE-78

TI-2021-15672 CVE-2021-37912 · GHSA-9wv9-vhvp-xjxr

MEDIUM 47

The HGiga OAKlouds mobile portal does not filter special characters of the Ethernet number parameter of the network interface card setting page.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02832 Published 2021-09-15 No fix listed CWE-78

TI-2021-05711 CVE-2021-22850 · GHSA-rc3j-2886-4xqj

MEDIUM 44

HGiga EIP product lacks ineffective access control in certain pages that allow attackers to access database or perform privileged functions.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01002 Published 2021-01-19 No fix listed CWE-732