Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: Fidelis Deception, Fidelis Network 9.3.7 Clear all filters
TI-2021-14012 CVE-2021-35049 · GHSA-8gjq-3w6q-pwg4

Command Injection Vulnerability in Fidelis Network and Deception

Priority MEDIUM 50

Vulnerability in Fidelis Network and Deception CommandPost enables authenticated command injection through the web interface.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.04615 Published 2021-06-25 Fixed in 9.3.7 CWE-89
TI-2021-14010 CVE-2021-35047 · GHSA-58g2-fffr-4mcc

Privileged Command Injection Vulnerability in Fidelis Network and Deception

Priority MEDIUM 46

Vulnerability in the CommandPost, Collector, and Sensor components of Fidelis Network and Deception enables an attacker with user level access to the CLI to inject root level commands into the component and neighboring F…

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.01638 Published 2021-06-25 Fixed in 9.3.7 CWE-78