Vulnerabilities

TI-2024-30328 CVE-2024-45252 · GHSA-m98m-c6v8-v5rm

Elsight – CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

MEDIUM 51

Elsight – CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01007 Published 2024-10-06 Fixed in Upgrade to version 11.9.4.0 CWE-78

TI-2024-30327 CVE-2024-45251 · GHSA-hpxw-q2cf-3qx5

MEDIUM 51

Elsight – CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01007 Published 2024-10-06 Fixed in Upgrade to version 11.9.4.0 CWE-78

TI-2022-17025 CVE-2022-36784 · GHSA-95hr-886r-52mf

MEDIUM 51

Elsight – Elsight Halo Remote Code Execution (RCE) Elsight Halo web panel allows us to perform connection validation.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01161 Published 2022-11-17 Fixed in Update to version 10.6.1 CWE-20