Vulnerabilities

TI-2021-16195 CVE-2021-38613 · GHSA-98v4-f37j-gm4q

The assets/index.php Image Upload feature of the NASCENT RemKon Device Manager 4.0.0.0…

MEDIUM 49

The assets/index.php Image Upload feature of the NASCENT RemKon Device Manager 4.0.0.0 allows attackers to upload any code to the target system and achieve remote code execution.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04549 Published 2021-08-24 No fix listed CWE-434

TI-2021-16194 CVE-2021-38612 · GHSA-hjhx-fhj9-6g3j

In NASCENT RemKon Device Manager 4.0.0.0, a Directory Traversal vulnerability in a…

LOW 36

In NASCENT RemKon Device Manager 4.0.0.0, a Directory Traversal vulnerability in a log-reading function in maintenance/readLog.php allows an attacker to read any file via a specialized URL.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01727 Published 2021-08-24 No fix listed CWE-22

TI-2021-16193 CVE-2021-38611 · GHSA-x2vg-c4cj-x56w

A command-injection vulnerability in the Image Upload function of the NASCENT RemKon…

MEDIUM 46

A command-injection vulnerability in the Image Upload function of the NASCENT RemKon Device Manager 4.0.0.0 allows attackers to execute arbitrary commands, as root, via shell metacharacters in the filename parameter to a…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01935 Published 2021-08-24 No fix listed CWE-77

Vulnerabilities

Filters

The assets/index.php Image Upload feature of the NASCENT RemKon Device Manager 4.0.0.0…

In NASCENT RemKon Device Manager 4.0.0.0, a Directory Traversal vulnerability in a…

A command-injection vulnerability in the Image Upload function of the NASCENT RemKon…