Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

8 records

Vendor: ORing Clear all filters
TI-2024-36875 CVE-2024-55548 · GHSA-f2r4-3q83-4c5x

Denial of service in ORing IAP-420

Priority MEDIUM 64

Improper check of password character lenght in ORing IAP-420 allows a forced deadlock.

CVSS 4.0MEDIUM 6.9 Network High privileges No interaction EPSS 0.00481 Published 2024-12-10 No fix listed CWE-703
TI-2024-36874 CVE-2024-55547 · GHSA-52wq-8j3g-pvxx

Remote Command Execution via SNMP

Priority HIGH 79

SNMP objects in NET-SNMP used in ORing IAP-420 allows Command Injection.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.17394 Published 2024-12-10 No fix listed CWE-77
TI-2024-36873 CVE-2024-55546 · GHSA-fcx8-3xwg-jjq7

Stored cross-site scripting in ORing IAP-420

Priority HIGH 70

Missing input validation in the ORing IAP-420 web-interface allows stored Cross-Site Scripting (XSS).This issue affects IAP-420 version 2.01e and below.

CVSS 4.0HIGH 7.1 Network No auth User interaction EPSS 0.0029 Published 2024-12-10 No fix listed CWE-79
TI-2024-36872 CVE-2024-55545 · GHSA-5c75-q5qv-27px

Reflected cross-site scripting in ORing IAP-420

Priority HIGH 70

Missing input validation in the ORing IAP-420 web-interface allows Cross-Site Scripting (XSS).This issue affects IAP-420 version 2.01e and below.

CVSS 4.0HIGH 7.1 Network No auth User interaction EPSS 0.00307 Published 2024-12-10 No fix listed CWE-79
TI-2024-36871 CVE-2024-55544 · GHSA-3q23-2j2r-mmw3

Authenticated command injection in ORing IAP-420

Priority HIGH 79

Missing input validation in the ORing IAP-420 web-interface allows authenticated Command Injections on OS level.This issue affects IAP-420 version 2.01e and below.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.12386 Published 2024-12-10 No fix listed CWE-77
TI-2024-05027 CVE-2024-5411

Command injection in ORing IAP-420

Priority HIGH 73

Missing input validation and OS command integration of the input in the ORing IAP-420 web-interface allows authenticated command injection.This issue affects IAP-420 version 2.01e and below.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.234 Published 2024-05-28 No fix listed CWE-78
TI-2024-05026 CVE-2024-5410

Stored cross-site scripting in ORing IAP-420

Priority MEDIUM 51

Missing input validation in the ORing IAP-420 web-interface allows stored Cross-Site Scripting (XSS).This issue affects IAP-420 version 2.01e and below.

CVSS 4.0HIGH 8.3 Network No auth User interaction EPSS 0.13737 Published 2024-05-28 No fix listed CWE-79
TI-2022-02958 CVE-2022-3203 · GHSA-4hvx-h8mx-pjgh

ORing net IAP-420(+) Hidden Functionality

Priority HIGH 82

On ORing net IAP-420(+) with FW version 2.0m a telnet server is enabled by default and cannot permanently be disabled.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01035 Published 2022-10-21 No fix listed CWE-912