Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

434 records

Priority MEDIUM 40

A stack-based buffer overflow vulnerability in the FileProcess::CheckDir function could allow a remote authenticated attacker to achieve arbitrary code execution via a path longer than 1024 bytes.

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.00656 Published 2026-10-20 No fix listed CWE-121
Priority LOW 27

A vulnerability could allow an attacker with access to an encrypted project file to retrieve administrator credentials for EdgeLink-enabled devices.

CVSS 4.0MEDIUM 6.3 Local Low privileges No interaction EPSS 0.00095 Published 2026-10-20 No fix listed CWE-311
Priority LOW 35

A vulnerability in the proprietary protocol could allow an attacker to brute force the administrator password without restrictions, even when the SafeEnhancement feature is enabled.

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.00296 Published 2026-10-20 No fix listed CWE-307
Priority MEDIUM 40

A stack-based buffer overflow vulnerability in a non-functional feature could allow an authenticated attacker to achieve code execution.

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.00458 Published 2026-10-20 No fix listed CWE-121
Priority LOW 36

A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via the rpc_rx_fsm function when msglen is set to 0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00344 Published 2026-10-20 No fix listed CWE-476
Priority LOW 30

A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via the on_disconnected callback function.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00344 Published 2026-10-20 No fix listed CWE-476
Priority MEDIUM 44

A NULL pointer dereference vulnerability in the logs management functionality could allow an unauthenticated attacker to crash the service.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00344 Published 2026-10-20 No fix listed CWE-476
Priority LOW 35

A buffer overflow vulnerability in the password verification functionality could allow an attacker with guest authentication to achieve code execution.

CVSS 4.0HIGH 7.5 Network High privileges No interaction EPSS 0.0043 Published 2026-10-20 No fix listed CWE-120
Priority MEDIUM 50

A vulnerability could allow an attacker to forge a packet to execute arbitrary commands with maximum privileges.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00888 Published 2026-10-20 No fix listed CWE-77
Priority LOW 38

A vulnerability in the firmware upgrade functionality could allow an authenticated attacker to upload a forged firmware upgrade file, potentially compromising the device permanently.

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.00185 Published 2026-10-20 No fix listed CWE-345
Priority LOW 35

A stack-based buffer overflow vulnerability in the logs settings functionality could allow an authenticated attacker to achieve code execution.

CVSS 4.0HIGH 7.5 Network High privileges No interaction EPSS 0.00366 Published 2026-10-20 No fix listed CWE-121
Load more