Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: Nvki Clear all filters
TI-2023-20791 CVE-2023-39809 · GHSA-5fvp-953q-q2rj

N.V.K.INTER CO., LTD.

Priority MEDIUM 52

N.V.K.INTER CO., LTD. (NVK) iBSG v3.5 was discovered to contain an OS command injection vulnerability via shell metacharacters in the system_hostname parameter at /manage/network-basic.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01493 Published 2023-08-21 No fix listed CWE-77
TI-2023-20790 CVE-2023-39808 · GHSA-62fj-4xw4-4wqj

N.V.K.INTER CO., LTD.

Priority MEDIUM 50

N.V.K.INTER CO., LTD. (NVK) iBSG v3.5 was discovered to contain a hardcoded root password that allows attackers to login with root privileges via the SSH service.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00645 Published 2023-08-21 No fix listed CWE-798
TI-2023-20789 CVE-2023-39807 · GHSA-jv2j-mm55-5fw8

N.V.K.INTER CO., LTD.

Priority MEDIUM 50

N.V.K.INTER CO., LTD. (NVK) iBSG v3.5 was discovered to contain a SQL injection vulnerability via the a_passwd parameter at /portal/user-register.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0062 Published 2023-08-21 No fix listed CWE-89