castlerock records

8 published records for vendor castlerock.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 0
With a fix record: 0%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

8 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
35Monitor	CVE-2015-6028No exploit	Castle Rock Computing SNMPc before 2015-12-17 has SQL injection via the sc parameter.castlerock · snmpc · CWE-89 SQL injection	High8.8	—	1.1%	Apr 9, 2017
35Monitor	CVE-2020-11553No exploit	An issue was discovered in Castle Rock SNMPc Online 12.10.10 before 2020-01-28.castlerock · snmpc online · CWE-352 Pre-auth CSRF	High8.8	—	0.5%	Apr 9, 2020
32Monitor	CVE-2019-13494Proof of concept	nodeimp.exe in Castle Rock SNMPc before 9.0.12.1 and 10.x before 10.0.9 has a stack-based buffer overflow via a long variable string in a Macastlerock · simple network management protocol console · CWE-787 Memory safety	High7.8	—	3.8%	Jul 12, 2019
30Monitor	CVE-2020-11554No exploit	An issue was discovered in Castle Rock SNMPc Online 12.10.10 before 2020-01-28.castlerock · snmpc online Pre-auth	High7.5	—	1.4%	Apr 9, 2020
30Monitor	CVE-2020-11555No exploit	An issue was discovered in Castle Rock SNMPc Online 12.10.10 before 2020-01-28.castlerock · snmpc online · CWE-522 Pre-auth Info leak	High7.5	—	1.3%	Apr 9, 2020
30Monitor	CVE-2020-11557No exploit	An issue was discovered in Castle Rock SNMPc Online 12.10.10 before 2020-01-28.castlerock · snmpc online · CWE-319 Pre-auth Weak crypto	High7.5	—	0.7%	Apr 9, 2020
24Monitor	CVE-2015-6027No exploit	Castle Rock Computing SNMPc before 2015-12-17 has XSS via SNMP.castlerock · snmpc · CWE-79 Pre-auth XSS	Medium6.1	—	0.7%	Apr 9, 2017
21Monitor	CVE-2020-11556No exploit	An issue was discovered in Castle Rock SNMPc Online 12.10.10 before 2020-01-28.castlerock · snmpc online · CWE-79 XSS	Medium5.4	—	0.5%	Apr 9, 2020

CVE-2015-6028
35Monitor
Castle Rock Computing SNMPc before 2015-12-17 has SQL injection via the sc parameter.
HighCVSS 8.8No exploitEPSS 1%
- SQL injection
castlerock · snmpcApr 9, 2017
CVE-2020-11553
35Monitor
An issue was discovered in Castle Rock SNMPc Online 12.10.10 before 2020-01-28.
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- CSRF
castlerock · snmpc onlineApr 9, 2020
CVE-2019-13494
32Monitor
nodeimp.exe in Castle Rock SNMPc before 9.0.12.1 and 10.x before 10.0.9 has a stack-based buffer overflow via a long variable string in a Ma
HighCVSS 7.8Proof of conceptEPSS 3%
- Memory safety
castlerock · simple network management protocol consoleJul 12, 2019
CVE-2020-11554
30Monitor
An issue was discovered in Castle Rock SNMPc Online 12.10.10 before 2020-01-28.
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
castlerock · snmpc onlineApr 9, 2020
CVE-2020-11555
30Monitor
An issue was discovered in Castle Rock SNMPc Online 12.10.10 before 2020-01-28.
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
- Info leak
castlerock · snmpc onlineApr 9, 2020
CVE-2020-11557
30Monitor
An issue was discovered in Castle Rock SNMPc Online 12.10.10 before 2020-01-28.
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Weak crypto
castlerock · snmpc onlineApr 9, 2020
CVE-2015-6027
24Monitor
Castle Rock Computing SNMPc before 2015-12-17 has XSS via SNMP.
MediumCVSS 6.1No exploitEPSS 0%
- Pre-auth
- XSS
castlerock · snmpcApr 9, 2017
CVE-2020-11556
21Monitor
An issue was discovered in Castle Rock SNMPc Online 12.10.10 before 2020-01-28.
MediumCVSS 5.4No exploitEPSS 0%
- XSS
castlerock · snmpc onlineApr 9, 2020