Vulnerabilities

TI-2022-15002 CVE-2022-34022 · GHSA-8whj-56g5-vq26

SQL injection vulnerability in ResIOT IOT Platform + LoRaWAN Network Server through…

HIGH 67

SQL injection vulnerability in ResIOT IOT Platform + LoRaWAN Network Server through 4.1.1000114 via a crafted POST request to /ResiotQueryDBActive.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00986 Published 2022-10-13 No fix listed CWE-89

TI-2022-15001 CVE-2022-34021 · GHSA-xcqx-ppvm-9wm8

Multiple Cross Site Scripting (XSS) vulnerabilities in ResIOT IOT Platform + LoRaWAN…

MEDIUM 58

Multiple Cross Site Scripting (XSS) vulnerabilities in ResIOT IOT Platform + LoRaWAN Network Server through 4.1.1000114 via the form fields.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00551 Published 2022-10-13 No fix listed CWE-79

TI-2022-15000 CVE-2022-34020 · GHSA-xqqf-j87h-83gq

Cross Site Request Forgery (CSRF) vulnerability in ResIOT ResIOT IOT Platform + LoRaWAN…

HIGH 73

Cross Site Request Forgery (CSRF) vulnerability in ResIOT ResIOT IOT Platform + LoRaWAN Network Server through 4.1.1000114 allows attackers to add new admin users to the platform or other unspecified impacts.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00558 Published 2022-10-13 No fix listed CWE-352

Vulnerabilities

Filters

SQL injection vulnerability in ResIOT IOT Platform + LoRaWAN Network Server through…

Multiple Cross Site Scripting (XSS) vulnerabilities in ResIOT IOT Platform + LoRaWAN…

Cross Site Request Forgery (CSRF) vulnerability in ResIOT ResIOT IOT Platform + LoRaWAN…