Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

TI-2022-04236 CVE-2022-4636 · GHSA-746p-8vmw-cpvx

Path traversal in Black Box KVM ACR1020A-T

Priority MEDIUM 41

Black Box KVM Firmware version 3.4.31307 on models ACR1000A-R-R2, ACR1000A-T-R2, ACR1002A-T, ACR1002A-R, and ACR1020A-T is vulnerable to path traversal, which may allow an attacker to steal user credentials and other sen…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0089 Published 2023-01-10 No fix listed CWE-22
Priority MEDIUM 47

Black Box iCOMPEL 9.2.3 through 11.1.4, as used in ONELAN Net-Top-Box 9.2.3 through 11.1.4 and other products, has default credentials that allow remote attackers to access devices remotely via SSH, HTTP, HTTPS, and FTP.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.0293 Published 2019-08-26 No fix listed CWE-798
Priority MEDIUM 52

The Crestron AM-100 firmware 1.6.0.2, Crestron AM-101 firmware 2.7.0.1, Barco wePresent WiPG-1000P firmware 2.3.0.10, Barco wePresent WiPG-1600W before firmware 2.4.1.19, Extron ShareLink 200/250 firmware 2.0.3.4, Teq AV…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.06957 Published 2019-04-30 No fix listed CWE-121
Priority CRITICAL 100KEV

The Crestron AM-100 firmware 1.6.0.2, Crestron AM-101 firmware 2.7.0.1, Barco wePresent WiPG-1000P firmware 2.3.0.10, Barco wePresent WiPG-1600W before firmware 2.4.1.19, Extron ShareLink 200/250 firmware 2.0.3.4, Teq AV…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.98952 Published 2019-04-30 No fix listed CWE-79
Priority LOW 31

Black Box AlertWerks ServSensor with firmware before SP473, AlertWerks ServSensor Junior with firmware before SP473, AlertWerks ServSensor Junior with PoE with firmware before SP473, and AlertWerks ServSensor Contact wit…

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01151 Published 2016-05-30 No fix listed CWE-200