Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Xinruidz Component: Sundray Wan Controller Firmware Clear all filters
TI-2019-06624 CVE-2019-9161 · GHSA-4cw2-9hrw-wm6g

WAC on the Sangfor Sundray WLAN Controller version 3.7.4.2 and earlier has a Remote Code…

Priority MEDIUM 49

WAC on the Sangfor Sundray WLAN Controller version 3.7.4.2 and earlier has a Remote Code Execution issue allowing remote attackers to achieve full access to the system, because shell metacharacters in the nginx_webconsol…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.04599 Published 2019-04-18 No fix listed CWE-78
TI-2019-06623 CVE-2019-9160 · GHSA-9qf2-c6mw-grcg

WAC on the Sangfor Sundray WLAN Controller version 3.7.4.2 and earlier has a backdoor…

Priority MEDIUM 48

WAC on the Sangfor Sundray WLAN Controller version 3.7.4.2 and earlier has a backdoor account allowing a remote attacker to login to the system via SSH (on TCP port 22345) and escalate to root (because the password for r…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03185 Published 2019-04-18 No fix listed CWE-798