imomobile records
4 published records for vendor imomobile.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Pre-auth RCE: flaws that let an attacker run code over the network without an account. Median publish → KEV: the typical time between a record being published and CISA listing it as exploited.
Recurring classes
- CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')1
- CWE-352 Cross-Site Request Forgery (CSRF)1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
- CWE-798 Use of Hard-coded Credentials1
The weakness classes this vendor ships most often: where to look.
CWEAll records
4 records| Action | CVE | Vulnerability | Severity | EPSS · Published |
|---|---|---|---|---|
40Plan | CVE-2020-27689No exploit | The Relish (Verve Connect) VH510 device with firmware before 1.0.1.6L0516 contains undocumented default admin credentials for the web manageimomobile · verve connect vh510 firmware · CWE-798 | Critical9.8 | 2.1%Nov 4, 2020 |
35Monitor | CVE-2020-27692No exploit | The Relish (Verve Connect) VH510 device with firmware before 1.0.1.6L0516 contains multiple CSRF vulnerabilities within its web management pimomobile · verve connect vh510 firmware · CWE-352 | High8.8 | 0.5%Nov 4, 2020 |
24Monitor | CVE-2020-27691No exploit | The Relish (Verve Connect) VH510 device with firmware before 1.0.1.6L0516 allows XSS via URLBlocking Settings, SNMP Settings, and System Logimomobile · verve connect vh510 firmware · CWE-79 | Medium6.1 | 0.9%Nov 4, 2020 |
22Monitor | CVE-2020-27690No exploit | The Relish (Verve Connect) VH510 device with firmware before 1.0.1.6L0516 contains a buffer overflow within its web management portal.imomobile · verve connect vh510 firmware · CWE-120 | Medium5.5 | 0.4%Nov 4, 2020 |
- CVE-2020-2768940Plan
The Relish (Verve Connect) VH510 device with firmware before 1.0.1.6L0516 contains undocumented default admin credentials for the web manage
CriticalCVSS 9.8No exploitEPSS 2%imomobile · verve connect vh510 firmwareNov 4, 2020
- CVE-2020-2769235Monitor
The Relish (Verve Connect) VH510 device with firmware before 1.0.1.6L0516 contains multiple CSRF vulnerabilities within its web management p
HighCVSS 8.8No exploitEPSS 0%imomobile · verve connect vh510 firmwareNov 4, 2020
- CVE-2020-2769124Monitor
The Relish (Verve Connect) VH510 device with firmware before 1.0.1.6L0516 allows XSS via URLBlocking Settings, SNMP Settings, and System Log
MediumCVSS 6.1No exploitEPSS 0%imomobile · verve connect vh510 firmwareNov 4, 2020
- CVE-2020-2769022Monitor
The Relish (Verve Connect) VH510 device with firmware before 1.0.1.6L0516 contains a buffer overflow within its web management portal.
MediumCVSS 5.5No exploitEPSS 0%imomobile · verve connect vh510 firmwareNov 4, 2020