amttgroup records
11 published records for vendor amttgroup.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 1
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')5
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')2
- CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')1
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
11 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
42Plan | CVE-2016-15048No exploit | AMTT HiBOS Command Injection RCE via server_ping.phpamttgroup · hibos · CWE-78 | Critical10.0 | — | 7.3% | Oct 22, 2025 |
39Monitor | CVE-2023-6647No exploit | AMTT HiBOS sql injectionamttgroup · hibos · CWE-89 | Critical9.8 | — | 1.0% | Dec 10, 2023 |
39Monitor | CVE-2024-41476No exploit | AMTT Hotel Broadband Operation System (HiBOS) V3.0.3.151204 and before is vulnerable to SQL Injection via /manager/card/card_detail.php.amttgroup · hibos · CWE-79 | Critical9.8 | — | 0.6% | Aug 12, 2024 |
25Monitor | CVE-2025-3983No exploit | AMTT Hotel Broadband Operation System nlog_down.php command injectionamttgroup · hibos · CWE-74 | Medium5.1 | — | 17.9% | Apr 27, 2025 |
23Monitor | CVE-2025-2701No exploit | AMTT Hotel Broadband Operation System port_setup.php popen os command injectionamttgroup · hibos · CWE-77 | Medium5.3 | — | 7.4% | Mar 24, 2025 |
22Monitor | CVE-2025-12253No exploit | AMTT Hotel Broadband Operation System get_expiredtime.php sql injectionamttgroup · hibos · CWE-74 | Medium5.5 | — | 0.4% | Oct 27, 2025 |
22Monitor | CVE-2024-39072No exploit | AMTT Hotel Broadband Operation System (HiBOS) v3.0.3.151204 is vulnerable to SQL injection via manager/conference/calendar_remind.php.amttgroup · hibos · CWE-89 | Medium5.5 | — | 0.3% | Jul 9, 2024 |
21Monitor | CVE-2024-11051No exploit | AMTT Hotel Broadband Operation System online_status.php sql injectionamttgroup · hibos · CWE-74 | Medium5.3 | — | 0.5% | Nov 10, 2024 |
21Monitor | CVE-2024-11050No exploit | AMTT Hotel Broadband Operation System language.php cross site scriptingamttgroup · hibos · CWE-79 | Medium5.3 | — | 0.4% | Nov 10, 2024 |
8Monitor | CVE-2025-13123No exploit | AMTT Hotel Broadband Operation System get_firstdate.php sql injectionamttgroup · hibos · CWE-74 | Low2.1 | — | 0.3% | Nov 13, 2025 |
8Monitor | CVE-2025-14090No exploit | AMTT Hotel Broadband Operation System cardmake_down.php sql injectionamttgroup · hibos · CWE-74 | Low2.0 | — | 0.3% | Dec 5, 2025 |
- CVE-2016-1504842Plan
AMTT HiBOS Command Injection RCE via server_ping.php
CriticalCVSS 10.0No exploitEPSS 7%amttgroup · hibosOct 22, 2025
- CVE-2023-664739Monitor
AMTT HiBOS sql injection
CriticalCVSS 9.8No exploitEPSS 1%amttgroup · hibosDec 10, 2023
- CVE-2024-4147639Monitor
AMTT Hotel Broadband Operation System (HiBOS) V3.0.3.151204 and before is vulnerable to SQL Injection via /manager/card/card_detail.php.
CriticalCVSS 9.8No exploitEPSS 0%amttgroup · hibosAug 12, 2024
- CVE-2025-398325Monitor
AMTT Hotel Broadband Operation System nlog_down.php command injection
MediumCVSS 5.1No exploitEPSS 17%amttgroup · hibosApr 27, 2025
- CVE-2025-270123Monitor
AMTT Hotel Broadband Operation System port_setup.php popen os command injection
MediumCVSS 5.3No exploitEPSS 7%amttgroup · hibosMar 24, 2025
- CVE-2025-1225322Monitor
AMTT Hotel Broadband Operation System get_expiredtime.php sql injection
MediumCVSS 5.5No exploitEPSS 0%amttgroup · hibosOct 27, 2025
- CVE-2024-3907222Monitor
AMTT Hotel Broadband Operation System (HiBOS) v3.0.3.151204 is vulnerable to SQL injection via manager/conference/calendar_remind.php.
MediumCVSS 5.5No exploitEPSS 0%amttgroup · hibosJul 9, 2024
- CVE-2024-1105121Monitor
AMTT Hotel Broadband Operation System online_status.php sql injection
MediumCVSS 5.3No exploitEPSS 0%amttgroup · hibosNov 10, 2024
- CVE-2024-1105021Monitor
AMTT Hotel Broadband Operation System language.php cross site scripting
MediumCVSS 5.3No exploitEPSS 0%amttgroup · hibosNov 10, 2024
- CVE-2025-131238Monitor
AMTT Hotel Broadband Operation System get_firstdate.php sql injection
LowCVSS 2.1No exploitEPSS 0%amttgroup · hibosNov 13, 2025
- CVE-2025-140908Monitor
AMTT Hotel Broadband Operation System cardmake_down.php sql injection
LowCVSS 2.0No exploitEPSS 0%amttgroup · hibosDec 5, 2025