Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: Commend Clear all filters
TI-2024-15535 CVE-2024-23492 · GHSA-gf7g-rcqh-h38h

Commend WS203VICM Weak Encoding for Password

Priority LOW 25

A weak encoding is used to transmit credentials for WS203VICM.

CVSS 3.1MEDIUM 5.7 Adjacent network No auth User interaction EPSS 0.00243 Published 2024-03-01 No fix listed CWE-261
TI-2024-14453 CVE-2024-21767 · GHSA-j879-7f55-p789

Commend WS203VICM Improper Access Control

Priority MEDIUM 47

A remote attacker may be able to bypass access control of Commend WS203VICM by creating a malicious request.

CVSS 3.1CRITICAL 9.4 Network No auth No interaction EPSS 0.00647 Published 2024-03-01 No fix listed CWE-284
TI-2024-14776 CVE-2024-22182 · GHSA-9v9r-86p3-cg7v

Commend WS203VICM Argument Injection

Priority MEDIUM 44

A remote, unauthenticated attacker may be able to send crafted messages to the web server of the Commend WS203VICM causing the system to restart, interrupting service.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00616 Published 2024-03-01 No fix listed CWE-88