Vulnerabilities

TI-2024-06420 CVE-2024-6921 · GHSA-xj9g-83cq-wf3m

Cleartext Username and Password in NAC Telecommunication's NACPremium

LOW 39

Cleartext Storage of Sensitive Information vulnerability in NAC Telecommunication Systems Inc.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.0024 Published 2024-09-02 No fix listed CWE-312

TI-2024-06419 CVE-2024-6920 · GHSA-x6hc-3hv8-fjx3

LOW 22

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NAC Telecommunication Systems Inc.

CVSS 4.0MEDIUM 4.8 Network Low privileges User interaction EPSS 0.00242 Published 2024-09-02 No fix listed CWE-79

TI-2024-06418 CVE-2024-6919 · GHSA-5jh6-g6wh-386v

MEDIUM 48

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in NAC Telecommunication Systems Inc.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00421 Published 2024-09-02 No fix listed CWE-89