Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

TI-2021-08938 CVE-2021-27451 · GHSA-8gx6-q6q9-c678

Mesa Labs AmegaView improper authentication

Priority MEDIUM 44

Mesa Labs AmegaView Versions 3.0 and prior’s passcode is generated by an easily reversible algorithm, which may allow an attacker to gain access to the device.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00854 Published 2021-12-21 No fix listed CWE-287
TI-2021-08934 CVE-2021-27447 · GHSA-c5wx-4cqq-ff6w

Mesa Labs AmegaView command injection

Priority MEDIUM 47

Mesa Labs AmegaView version 3.0 is vulnerable to a command injection, which may allow an attacker to remotely execute arbitrary code.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.02363 Published 2021-12-21 No fix listed CWE-77
TI-2021-08940 CVE-2021-27453 · GHSA-6f9w-r8mj-4h2w

Mesa Labs AmegaView authentication bypass

Priority MEDIUM 44

Mesa Labs AmegaView Versions 3.0 uses default cookies that could be set to bypass authentication to the web application, which may allow an attacker to gain access.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01046 Published 2021-12-21 No fix listed CWE-288
TI-2021-08936 CVE-2021-27449 · GHSA-2gm8-jj36-c9vw

Mesa Labs AmegaView Command Injection

Priority MEDIUM 48

Mesa Labs AmegaView Versions 3.0 and prior has a command injection vulnerability that can be exploited to execute commands in the web server.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.03172 Published 2021-12-21 No fix listed CWE-77
Priority LOW 34

Mesa Labs AmegaView Versions 3.0 and prior has insecure file permissions that could be exploited to escalate privileges on the device.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00231 Published 2021-12-21 No fix listed CWE-269