Vulnerabilities

TI-2024-00217 CVE-2024-0242 · GHSA-mc3m-gj6r-2fhp

Unauthorized access to settings in Qolsys IQ Panel 4 and IQ4 Hub

MEDIUM 43

Under certain circumstances IQ Panel4 and IQ4 Hub panel software prior to version 4.4.2 could allow unauthorized access to settings.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00585 Published 2024-02-08 Fixed in 4.4.2 CWE-200

TI-2015-05102 CVE-2015-6033 · GHSA-pj39-g3x7-52h4

Qolsys IQ Panel (aka QOL) before 1.5.1 does not verify the digital signatures of software…

MEDIUM 45

Qolsys IQ Panel (aka QOL) before 1.5.1 does not verify the digital signatures of software updates, which allows man-in-the-middle attackers to bypass intended access restrictions via a modified update.

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.02392 Published 2015-10-31 No fix listed CWE-310

TI-2015-05101 CVE-2015-6032 · GHSA-7w76-g22v-gxpg

Qolsys IQ Panel (aka QOL) before 1.5.1 has hardcoded cryptographic keys, which allows…

MEDIUM 46

Qolsys IQ Panel (aka QOL) before 1.5.1 has hardcoded cryptographic keys, which allows remote attackers to create digital signatures for code by leveraging knowledge of a key from a different installation.

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.0328 Published 2015-10-31 No fix listed CWE-255

Vulnerabilities

Filters

Unauthorized access to settings in Qolsys IQ Panel 4 and IQ4 Hub

Qolsys IQ Panel (aka QOL) before 1.5.1 does not verify the digital signatures of software…

Qolsys IQ Panel (aka QOL) before 1.5.1 has hardcoded cryptographic keys, which allows…