Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: JCT Clear all filters
TI-2025-04137 CVE-2025-4636 · GHSA-fjc6-ph8v-27j9

Local privilege escalation in JCT Airpointer

Priority LOW 35

Due to excessive privileges granted to the web user running the airpointer web platform, a malicious actor that gains control of the this user would be able to privilege escalate to the root user

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00165 Published 2025-05-30 No fix listed CWE-269
TI-2025-04136 CVE-2025-4635 · GHSA-85x7-533r-gjfq

Remote code execution in JCT Airpointer

Priority LOW 30

A malicious user with administrative privileges in the web portal would be able to manipulate the Diagnostics module to obtain remote code execution on the local device as a low privileged user.

CVSS 3.1MEDIUM 6.6 Network High privileges No interaction EPSS 0.00444 Published 2025-05-30 No fix listed CWE-20
TI-2025-04135 CVE-2025-4634 · GHSA-67x9-8jxx-85f8

Local File Inclusion

Priority LOW 19

The web portal on airpointer 2.4.107-2 was vulnerable local file inclusion.

CVSS 3.1MEDIUM 4.1 Network High privileges No interaction EPSS 0.00291 Published 2025-05-30 No fix listed CWE-552
TI-2025-04134 CVE-2025-4633 · GHSA-gx9w-mmx8-h596

Default credentials in JCT Airpointer

Priority LOW 34

Default credentials were present in the web portal for Airpointer 2.4.107-2, allowing an unauthenticated malicious actor to log in via the web portal

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.0027 Published 2025-05-30 No fix listed CWE-798