cassianetworks records
5 published records for vendor cassianetworks.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 1
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Pre-auth RCE: flaws that let an attacker run code over the network without an account. Median publish → KEV: the typical time between a record being published and CISA listing it as exploited.
Recurring classes
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-287 Improper Authentication1
- CWE-352 Cross-Site Request Forgery (CSRF)1
- CWE-732 Incorrect Permission Assignment for Critical Resource1
- CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')1
The weakness classes this vendor ships most often: where to look.
CWEAll records
5 records| Action | CVE | Vulnerability | Severity | EPSS · Published |
|---|---|---|---|---|
57Plan | CVE-2023-31446Proof of concept | In Cassia Gateway firmware XC1000_2.1.1.2303082218 and XC2000_2.1.1.2303090947, the queueUrl parameter in /bypass/config is not sanitized.cassianetworks · xc1000 firmware · CWE-77 | Critical9.8 | 61.0%Jan 9, 2024 |
35Monitor | CVE-2023-35794Proof of concept | An issue was discovered in Cassia Access Controller 2.1.1.2303271039.cassianetworks · access controller · CWE-287 | High8.8 | 1.2%Oct 27, 2023 |
35Monitor | CVE-2023-35793Proof of concept | An issue was discovered in Cassia Access Controller 2.1.1.2303271039.cassianetworks · access controller · CWE-352 | High8.8 | 1.0%Sep 27, 2023 |
30Monitor | CVE-2021-22685No exploit | Cassia Networks Access Controller Path Traversalcassianetworks · access controller · CWE-22 | High7.5 | 0.7%Oct 14, 2022 |
21Monitor | CVE-2023-31445Proof of concept | Cassia Access controller before 2.1.1.2203171453, was discovered to have a unprivileged -information disclosure vulnerability that allows recassianetworks · access controller · CWE-732 | Medium5.3 | 1.1%May 11, 2023 |
- CVE-2023-3144657Plan
In Cassia Gateway firmware XC1000_2.1.1.2303082218 and XC2000_2.1.1.2303090947, the queueUrl parameter in /bypass/config is not sanitized.
CriticalCVSS 9.8Proof of conceptEPSS 61%cassianetworks · xc1000 firmwareJan 9, 2024
- CVE-2023-3579435Monitor
An issue was discovered in Cassia Access Controller 2.1.1.2303271039.
HighCVSS 8.8Proof of conceptEPSS 1%cassianetworks · access controllerOct 27, 2023
- CVE-2023-3579335Monitor
An issue was discovered in Cassia Access Controller 2.1.1.2303271039.
HighCVSS 8.8Proof of conceptEPSS 1%cassianetworks · access controllerSep 27, 2023
- CVE-2021-2268530Monitor
Cassia Networks Access Controller Path Traversal
HighCVSS 7.5No exploitEPSS 0%cassianetworks · access controllerOct 14, 2022
- CVE-2023-3144521Monitor
Cassia Access controller before 2.1.1.2203171453, was discovered to have a unprivileged -information disclosure vulnerability that allows re
MediumCVSS 5.3Proof of conceptEPSS 1%cassianetworks · access controllerMay 11, 2023