oringnet kayıtları
oringnet üreticisine ait 8 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3
- CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')2
- CWE-703 Improper Check or Handling of Exceptional Conditions1
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')1
- CWE-912 Hidden Functionality1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
8 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
42Planlayın | CVE-2024-55547İstismar yok | Remote Command Execution via SNMPoringnet · iap-420 firmware · CWE-77 | Kritik9,3 | — | %17,4 | 10 Ara 2024 |
41Planlayın | CVE-2024-5411İstismar yok | Missing input validation and OS command integration of the input in the ORing IAP-420 web-interface allows authenticated command injection.Toringnet · iap-420 firmware · CWE-78 | Yüksek8,7 | — | %23,4 | 28 May 2024 |
39İzleyin | CVE-2022-3203İstismar yok | ORing net IAP-420(+) Hidden Functionalityoringnet · iap-420\+ firmware · CWE-912 | Kritik9,8 | — | %0,9 | 21 Eki 2022 |
38İzleyin | CVE-2024-55544İstismar yok | Authenticated Command Injectionoringnet · iap-420 firmware · CWE-77 | Yüksek8,7 | — | %12,0 | 10 Ara 2024 |
37İzleyin | CVE-2024-5410İstismar yok | Stored Cross-Site Scriptingoringnet · iap-420 firmware · CWE-79 | Yüksek8,3 | — | %13,7 | 28 May 2024 |
28İzleyin | CVE-2024-55545İstismar yok | Reflected Cross-Site Scriptingoringnet · iap-420 firmware · CWE-79 | Yüksek7,1 | — | %0,3 | 10 Ara 2024 |
28İzleyin | CVE-2024-55546İstismar yok | Stored Cross-Site Scriptingoringnet · iap-420 firmware · CWE-79 | Yüksek7,1 | — | %0,3 | 10 Ara 2024 |
27İzleyin | CVE-2024-55548İstismar yok | Improper check of password character lenght in ORing IAP-420 allows a forced deadlock.oringnet · iap-420 firmware · CWE-703 | Orta6,9 | — | %0,5 | 10 Ara 2024 |
- CVE-2024-5554742Planlayın
Remote Command Execution via SNMP
KritikCVSS 9,3İstismar yokEPSS %17oringnet · iap-420 firmware10 Ara 2024
- CVE-2024-541141Planlayın
Missing input validation and OS command integration of the input in the ORing IAP-420 web-interface allows authenticated command injection.T
YüksekCVSS 8,7İstismar yokEPSS %23oringnet · iap-420 firmware28 May 2024
- CVE-2022-320339İzleyin
ORing net IAP-420(+) Hidden Functionality
KritikCVSS 9,8İstismar yokEPSS %1oringnet · iap-420\+ firmware21 Eki 2022
- CVE-2024-5554438İzleyin
Authenticated Command Injection
YüksekCVSS 8,7İstismar yokEPSS %12oringnet · iap-420 firmware10 Ara 2024
- CVE-2024-541037İzleyin
Stored Cross-Site Scripting
YüksekCVSS 8,3İstismar yokEPSS %14oringnet · iap-420 firmware28 May 2024
- CVE-2024-5554528İzleyin
Reflected Cross-Site Scripting
YüksekCVSS 7,1İstismar yokEPSS %0oringnet · iap-420 firmware10 Ara 2024
- CVE-2024-5554628İzleyin
Stored Cross-Site Scripting
YüksekCVSS 7,1İstismar yokEPSS %0oringnet · iap-420 firmware10 Ara 2024
- CVE-2024-5554827İzleyin
Improper check of password character lenght in ORing IAP-420 allows a forced deadlock.
OrtaCVSS 6,9İstismar yokEPSS %0oringnet · iap-420 firmware10 Ara 2024