Skip to content
Noroxi

relyum records

14 published records for vendor relyum.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
1
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 23
  2. 24

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

14 records
  • CVE-2023-47577
    39Monitor

    An issue discovered in Relyum RELY-PCIe 22.2.1 and RELY-REC 23.1.0 allows for unauthorized password changes due to no check for current pass

    CriticalCVSS 9.8No exploitEPSS 1%

    relyum · rely-pcie firmwareDec 12, 2023

  • CVE-2023-47576
    35Monitor

    An issue was discovered in Relyum RELY-PCIe 22.2.1 and RELY-REC 23.1.0 devices, allowing authenticated command injection through the web int

    HighCVSS 8.8No exploitEPSS 2%

    relyum · rely-pcie firmwareDec 12, 2023

  • CVE-2024-44577
    35Monitor

    RELY-PCIe v22.2.1 to v23.1.0 was discovered to contain a command injection vulnerability via the time_date function.

    HighCVSS 8.8No exploitEPSS 1%

    relyum · rely-pcie firmwareSep 11, 2024

  • CVE-2024-44572
    35Monitor

    RELY-PCIe v22.2.1 to v23.1.0 was discovered to contain a command injection vulnerability via the sys_mgmt function.

    HighCVSS 8.8No exploitEPSS 1%

    relyum · rely-pcie firmwareSep 11, 2024

  • CVE-2024-44574
    35Monitor

    RELY-PCIe v22.2.1 to v23.1.0 was discovered to contain a command injection vulnerability via the sys_conf function.

    HighCVSS 8.8No exploitEPSS 1%

    relyum · rely-pcie firmwareSep 11, 2024

  • CVE-2023-47573
    35Monitor

    An issue discovered in Relyum RELY-PCIe 22.2.1 devices.

    HighCVSS 8.8No exploitEPSS 1%

    relyum · rely-pcie firmwareDec 12, 2023

  • CVE-2024-44570
    35Monitor

    RELY-PCIe v22.2.1 to v23.1.0 was discovered to contain a code injection vulnerability via the getParams function in phpinf.php.

    HighCVSS 8.8No exploitEPSS 0%

    relyum · rely-pcie firmwareSep 11, 2024

  • CVE-2024-44571
    35Monitor

    RELY-PCIe v22.2.1 to v23.1.0 was discovered to contain incorrect access control in the mService function at phpinf.php.

    HighCVSS 8.8No exploitEPSS 0%

    relyum · rely-pcie firmwareSep 11, 2024

  • CVE-2023-47578
    35Monitor

    Relyum RELY-PCIe 22.2.1 and RELY-REC 23.1.0 devices are susceptible to Cross Site Request Forgery (CSRF) attacks due to the absence of CSRF

    HighCVSS 8.8No exploitEPSS 0%

    relyum · rely-pcie firmwareDec 12, 2023

  • CVE-2023-47579
    30Monitor

    Relyum RELY-PCIe 22.2.1 devices suffer from a system group misconfiguration, allowing read access to the central password hash file of the o

    HighCVSS 7.5No exploitEPSS 1%

    relyum · rely-pcie firmwareDec 12, 2023

  • CVE-2023-47575
    24Monitor

    An issue was discovered on Relyum RELY-PCIe 22.2.1 and RELY-REC 23.1.0 devices.

    MediumCVSS 6.1No exploitEPSS 0%

    relyum · rely-pcie firmwareDec 12, 2023

  • CVE-2023-47574
    23Monitor

    An issue was discovered on Relyum RELY-PCIe 22.2.1 and RELY-REC 23.1.0 devices.

    MediumCVSS 5.9No exploitEPSS 0%

    relyum · rely-pcie firmwareDec 12, 2023

  • CVE-2024-44573
    18Monitor

    A stored cross-site scripting (XSS) vulnerability in the VLAN configuration of RELY-PCIe v22.2.1 to v23.1.0 allows attackers to execute arbi

    MediumCVSS 4.7No exploitEPSS 0%

    relyum · rely-pcie firmwareSep 11, 2024

  • CVE-2024-44575
    14Monitor

    RELY-PCIe v22.2.1 to v23.1.0 does not set the Secure attribute for sensitive cookies in HTTPS sessions, which could cause the user agent to

    LowCVSS 3.7No exploitEPSS 0%

    relyum · rely-pcie firmwareSep 11, 2024