4ipnet records
2 published records for vendor 4ipnet.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-284 Improper Access Control1
- CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')1
The weakness classes this vendor ships most often: where to look.
CWEAll records
2 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
39Monitor | CVE-2024-24300No exploit | 4ipnet EAP-767 v3.42.00 is vulnerable to Incorrect Access Control.4ipnet · eap-767 firmware · CWE-284 | Critical9.8 | — | 0.7% | Feb 14, 2024 |
36Monitor | CVE-2024-24301No exploit | Command Injection vulnerability discovered in 4ipnet EAP-767 device v3.42.00 within the web interface of the device allows attackers with va4ipnet · eap-767 firmware · CWE-77 | High8.8 | — | 2.0% | Feb 14, 2024 |
- CVE-2024-2430039Monitor
4ipnet EAP-767 v3.42.00 is vulnerable to Incorrect Access Control.
CriticalCVSS 9.8No exploitEPSS 0%4ipnet · eap-767 firmwareFeb 14, 2024
- CVE-2024-2430136Monitor
Command Injection vulnerability discovered in 4ipnet EAP-767 device v3.42.00 within the web interface of the device allows attackers with va
HighCVSS 8.8No exploitEPSS 2%4ipnet · eap-767 firmwareFeb 14, 2024