Vulnerabilities

TI-2022-11697 CVE-2022-29152 · GHSA-f388-xh2q-wcwr

The Ericom PowerTerm WebConnect 6.0 login portal can unsafely write an XSS payload from…

LOW 28

The Ericom PowerTerm WebConnect 6.0 login portal can unsafely write an XSS payload from the AppPortal cookie into the page.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00568 Published 2022-04-28 No fix listed CWE-79

TI-2020-15030 CVE-2020-24548 · GHSA-4f8m-hgv8-w5q2

Ericom Access Server 9.2.0 (for AccessNow and Ericom Blaze) allows SSRF to make outbound…

LOW 27

Ericom Access Server 9.2.0 (for AccessNow and Ericom Blaze) allows SSRF to make outbound WebSocket connection requests on arbitrary TCP ports, and provides "Cannot connect to" error messages to inform the attacker about…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01689 Published 2020-08-26 No fix listed CWE-918

TI-2014-03186 CVE-2014-3913 · GHSA-fh6q-fh77-8r3p

Stack-based buffer overflow in AccessServer32.exe in Ericom AccessNow Server allows…

HIGH 77

Stack-based buffer overflow in AccessServer32.exe in Ericom AccessNow Server allows remote attackers to execute arbitrary code via a request for a non-existent file.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.6086 Published 2014-06-04 No fix listed CWE-119

Vulnerabilities

Filters

The Ericom PowerTerm WebConnect 6.0 login portal can unsafely write an XSS payload from…

Ericom Access Server 9.2.0 (for AccessNow and Ericom Blaze) allows SSRF to make outbound…

Stack-based buffer overflow in AccessServer32.exe in Ericom AccessNow Server allows…