Vulnerabilities

TI-2018-14691 CVE-2018-20687 · GHSA-v65r-3m4g-37fx

An XML external entity (XXE) vulnerability in CommandCenterWebServices/.*?wsdl in Raritan…

MEDIUM 47

An XML external entity (XXE) vulnerability in CommandCenterWebServices/.*?wsdl in Raritan CommandCenter Secure Gateway before 8.0.0 allows remote unauthenticated users to read arbitrary files or conduct server-side reque…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02528 Published 2019-11-18 No fix listed CWE-611

TI-2014-07388 CVE-2014-9095 · GHSA-grgr-xcwq-f47f

Multiple SQL injection vulnerabilities in Raritan Power IQ 4.1.0 and 4.2.1 allow remote…

LOW 37

Multiple SQL injection vulnerabilities in Raritan Power IQ 4.1.0 and 4.2.1 allow remote attackers to execute arbitrary SQL commands via the (1) sort or (2) dir parameter to license/records.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02348 Published 2014-11-26 No fix listed CWE-89

TI-2014-03174 CVE-2014-3901 · GHSA-f53w-cccm-pmf8

Raritan Japan Dominion KX2-101 switches before 2 allow remote attackers to cause a denial…

LOW 38

Raritan Japan Dominion KX2-101 switches before 2 allow remote attackers to cause a denial of service (device hang) via a crafted packet.

CVSS 2.0HIGH 7.8 Network No auth Interaction — EPSS 0.02271 Published 2014-08-12 No fix listed

TI-2014-02365 CVE-2014-2955 · GHSA-7x69-82vj-v63v

Raritan PX before 1.5.11 on DPXR20A-16 devices allows remote attackers to bypass…

MEDIUM 48

Raritan PX before 1.5.11 on DPXR20A-16 devices allows remote attackers to bypass authentication and execute arbitrary IPMI commands by using cipher suite 0 (aka cipher zero) and an arbitrary password.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.02774 Published 2014-07-14 No fix listed CWE-287

TI-2005-02017 CVE-2005-2136 · GHSA-5hmj-phhp-xxgh

Raritan Dominion SX (DSX) Console Servers DSX16, DSX32, DSX4, DSX8, and DSXA-48 set (1)…

LOW 22

Raritan Dominion SX (DSX) Console Servers DSX16, DSX32, DSX4, DSX8, and DSXA-48 set (1) world-readable permissions for /etc/shadow and (2) world-writable permissions for /bin/busybox, which allows local users to obtain h…

CVSS 2.0MEDIUM 4.6 Local No auth Interaction — EPSS 0.00586 Published 2005-07-05 No fix listed CWE-863