AiLux records

12 published records for vendor ailux.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 0
With a fix record: 100%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

12 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
39Monitor	CVE-2023-45592No exploit	A CWE-250 “Execution with Unnecessary Privileges” vulnerability in the embedded Chromium browser (due to the binary being executed with the ailux · imx6 · CWE-250 Pre-auth	Critical9.8	—	0.7%	Mar 5, 2024
39Monitor	CVE-2023-5457No exploit	A CWE-1269 “Product Released in Non-Release Configuration” vulnerability in the Django web framework used by the web application (due to theailux · imx6 · CWE-1269 Pre-auth	Critical9.8	—	0.6%	Mar 5, 2024
39Monitor	CVE-2023-5456No exploit	A CWE-798 “Use of Hard-coded Credentials” vulnerability in the MariaDB database of the web application allows a remote unauthenticated attacailux · imx6 · CWE-798 Pre-auth Hard-coded credentials	Critical9.8	—	0.5%	Mar 5, 2024
39Monitor	CVE-2023-45600No exploit	A CWE-613 “Insufficient Session Expiration” vulnerability in the web application, due to the session cookie “sessionid” lasting two weeks, failux · imx6 · CWE-613 Pre-auth	Critical9.8	—	0.3%	Mar 5, 2024
36Monitor	CVE-2023-45597No exploit	A CWE-1236 “Improper Neutralization of Formula Elements in a CSV File” vulnerability in the “file_configuration” functionality of the web apailux · imx6 · CWE-1236	Critical9.0	—	0.4%	Mar 5, 2024
35Monitor	CVE-2023-45591No exploit	A CWE-122 “Heap-based Buffer Overflow” vulnerability in the “logger_generic” function of the “Ax_rtu” binary allows a remote authenticated aailux · imx6 · CWE-122 RCE Memory safety	High8.8	—	0.7%	Mar 5, 2024
35Monitor	CVE-2023-45595No exploit	A CWE-434 “Unrestricted Upload of File with Dangerous Type” vulnerability in the “file_configuration” functionality of the web application aailux · imx6 · CWE-434 File upload	High8.8	—	0.4%	Mar 5, 2024
35Monitor	CVE-2023-45599No exploit	A CWE-646 “Reliance on File Name or Extension of Externally-Supplied File” vulnerability in the “iec61850” functionality of the web applicatailux · imx6 · CWE-646	High8.8	—	0.2%	Mar 5, 2024
27Monitor	CVE-2023-45594No exploit	A CWE-552 “Files or Directories Accessible to External Parties” vulnerability in the embedded Chromium browser allows a physical attacker toailux · imx6 · CWE-552	Medium6.8	—	0.2%	Mar 5, 2024
27Monitor	CVE-2023-45593No exploit	A CWE-184 “Incomplete List of Disallowed Inputs” vulnerability in the embedded Chromium browser (concerning the handling of alternative URLsailux · imx6 · CWE-184	Medium6.8	—	0.2%	Mar 5, 2024
21Monitor	CVE-2023-45596No exploit	A CWE-425 “Direct Request ('Forced Browsing')” vulnerability in the “file_configuration” functionality of the web application allows a remotailux · imx6 · CWE-425 Pre-auth	Medium5.3	—	0.4%	Mar 5, 2024
21Monitor	CVE-2023-45598No exploit	A CWE-425 “Direct Request ('Forced Browsing')” vulnerability in the “measure” functionality of the web application allows a remote unauthentailux · imx6 · CWE-425 Pre-auth	Medium5.3	—	0.4%	Mar 5, 2024

CVE-2023-45592
39Monitor
A CWE-250 “Execution with Unnecessary Privileges” vulnerability in the embedded Chromium browser (due to the binary being executed with the
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
ailux · imx6Mar 5, 2024
CVE-2023-5457
39Monitor
A CWE-1269 “Product Released in Non-Release Configuration” vulnerability in the Django web framework used by the web application (due to the
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
ailux · imx6Mar 5, 2024
CVE-2023-5456
39Monitor
A CWE-798 “Use of Hard-coded Credentials” vulnerability in the MariaDB database of the web application allows a remote unauthenticated attac
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Hard-coded credentials
ailux · imx6Mar 5, 2024
CVE-2023-45600
39Monitor
A CWE-613 “Insufficient Session Expiration” vulnerability in the web application, due to the session cookie “sessionid” lasting two weeks, f
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
ailux · imx6Mar 5, 2024
CVE-2023-45597
36Monitor
A CWE-1236 “Improper Neutralization of Formula Elements in a CSV File” vulnerability in the “file_configuration” functionality of the web ap
CriticalCVSS 9.0No exploitEPSS 0%
ailux · imx6Mar 5, 2024
CVE-2023-45591
35Monitor
A CWE-122 “Heap-based Buffer Overflow” vulnerability in the “logger_generic” function of the “Ax_rtu” binary allows a remote authenticated a
HighCVSS 8.8No exploitEPSS 0%
- RCE
- Memory safety
ailux · imx6Mar 5, 2024
CVE-2023-45595
35Monitor
A CWE-434 “Unrestricted Upload of File with Dangerous Type” vulnerability in the “file_configuration” functionality of the web application a
HighCVSS 8.8No exploitEPSS 0%
- File upload
ailux · imx6Mar 5, 2024
CVE-2023-45599
35Monitor
A CWE-646 “Reliance on File Name or Extension of Externally-Supplied File” vulnerability in the “iec61850” functionality of the web applicat
HighCVSS 8.8No exploitEPSS 0%
ailux · imx6Mar 5, 2024
CVE-2023-45594
27Monitor
A CWE-552 “Files or Directories Accessible to External Parties” vulnerability in the embedded Chromium browser allows a physical attacker to
MediumCVSS 6.8No exploitEPSS 0%
ailux · imx6Mar 5, 2024
CVE-2023-45593
27Monitor
A CWE-184 “Incomplete List of Disallowed Inputs” vulnerability in the embedded Chromium browser (concerning the handling of alternative URLs
MediumCVSS 6.8No exploitEPSS 0%
ailux · imx6Mar 5, 2024
CVE-2023-45596
21Monitor
A CWE-425 “Direct Request ('Forced Browsing')” vulnerability in the “file_configuration” functionality of the web application allows a remot
MediumCVSS 5.3No exploitEPSS 0%
- Pre-auth
ailux · imx6Mar 5, 2024
CVE-2023-45598
21Monitor
A CWE-425 “Direct Request ('Forced Browsing')” vulnerability in the “measure” functionality of the web application allows a remote unauthent
MediumCVSS 5.3No exploitEPSS 0%
- Pre-auth
ailux · imx6Mar 5, 2024