hosteng records

2 published records for vendor hosteng.

Researcher profile

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

2 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
30Monitor	CVE-2020-25195No exploit	The length of the input fields of Host Engineering H0-ECOM100, H2-ECOM100, and H4-ECOM100 modules are verified only on the client side when hosteng · h0-ecom100 firmware · CWE-20 Pre-auth Denial of service	High7.5	—	1.4%	Dec 15, 2020
26Monitor	CVE-2022-3228No exploit	Using custom code, an attacker can write into name or description fields larger than the appropriate buffer size causing a stack-based buffehosteng · h0-ecom100 firmware · CWE-121 Pre-auth Memory safety Denial of service	Medium6.5	—	0.3%	Oct 28, 2022

CVE-2020-25195
30Monitor
The length of the input fields of Host Engineering H0-ECOM100, H2-ECOM100, and H4-ECOM100 modules are verified only on the client side when
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
- Denial of service
hosteng · h0-ecom100 firmwareDec 15, 2020
CVE-2022-3228
26Monitor
Using custom code, an attacker can write into name or description fields larger than the appropriate buffer size causing a stack-based buffe
MediumCVSS 6.5No exploitEPSS 0%
hosteng · h0-ecom100 firmwareOct 28, 2022