invigo records
6 published records for vendor invigo.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 1
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2
- CWE-668 Exposure of Resource to Wrong Sphere1
- CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')1
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')1
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')1
The weakness classes this vendor ships most often: where to look.
CWEAll records
6 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
39Monitor | CVE-2020-10582No exploit | A SQL injection on the /admin/display_errors.php script of Invigo Automatic Device Management (ADM) through 5.0 allows remote attackers to einvigo · automatic device management · CWE-89 | Critical9.8 | — | 1.6% | Mar 25, 2021 |
36Monitor | CVE-2020-10580No exploit | A command injection on the /admin/broadcast.php script of Invigo Automatic Device Management (ADM) through 5.0 allows remote authenticated ainvigo · automatic device management · CWE-77 | High8.8 | — | 3.9% | Mar 25, 2021 |
36Monitor | CVE-2020-10583No exploit | The /admin/admapi.php script of Invigo Automatic Device Management (ADM) through 5.0 allows remote authenticated attackers to execute arbitrinvigo · automatic device management · CWE-78 | High8.8 | — | 2.8% | Mar 25, 2021 |
31Monitor | CVE-2020-10579No exploit | A directory traversal on the /admin/sysmon.php script of Invigo Automatic Device Management (ADM) through 5.0 allows remote attackers to lisinvigo · automatic device management · CWE-22 | High7.5 | — | 2.2% | Mar 25, 2021 |
31Monitor | CVE-2020-10584No exploit | A directory traversal on the /admin/search_by.php script of Invigo Automatic Device Management (ADM) through 5.0 allows remote attackers to invigo · automatic device management · CWE-22 | High7.5 | — | 2.2% | Mar 25, 2021 |
30Monitor | CVE-2020-10581No exploit | Multiple session validity check issues in several administration functionalities of Invigo Automatic Device Management (ADM) through 5.0 allinvigo · automatic device management · CWE-668 | High7.5 | — | 1.3% | Mar 25, 2021 |
- CVE-2020-1058239Monitor
A SQL injection on the /admin/display_errors.php script of Invigo Automatic Device Management (ADM) through 5.0 allows remote attackers to e
CriticalCVSS 9.8No exploitEPSS 2%invigo · automatic device managementMar 25, 2021
- CVE-2020-1058036Monitor
A command injection on the /admin/broadcast.php script of Invigo Automatic Device Management (ADM) through 5.0 allows remote authenticated a
HighCVSS 8.8No exploitEPSS 4%invigo · automatic device managementMar 25, 2021
- CVE-2020-1058336Monitor
The /admin/admapi.php script of Invigo Automatic Device Management (ADM) through 5.0 allows remote authenticated attackers to execute arbitr
HighCVSS 8.8No exploitEPSS 3%invigo · automatic device managementMar 25, 2021
- CVE-2020-1057931Monitor
A directory traversal on the /admin/sysmon.php script of Invigo Automatic Device Management (ADM) through 5.0 allows remote attackers to lis
HighCVSS 7.5No exploitEPSS 2%invigo · automatic device managementMar 25, 2021
- CVE-2020-1058431Monitor
A directory traversal on the /admin/search_by.php script of Invigo Automatic Device Management (ADM) through 5.0 allows remote attackers to
HighCVSS 7.5No exploitEPSS 2%invigo · automatic device managementMar 25, 2021
- CVE-2020-1058130Monitor
Multiple session validity check issues in several administration functionalities of Invigo Automatic Device Management (ADM) through 5.0 all
HighCVSS 7.5No exploitEPSS 1%invigo · automatic device managementMar 25, 2021