kaiten records
2 published records for vendor kaiten.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Pre-auth RCE: flaws that let an attacker run code over the network without an account. Median publish → KEV: the typical time between a record being published and CISA listing it as exploited.
Recurring classes
- CWE-204 Observable Response Discrepancy1
- CWE-307 Improper Restriction of Excessive Authentication Attempts1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
2 records| Action | CVE | Vulnerability | Severity | EPSS · Published |
|---|---|---|---|---|
39Monitor | CVE-2024-41276Proof of concept | A vulnerability in Kaiten version 57.131.12 and earlier allows attackers to bypass the PIN code authentication mechanism.CWE-307 | Critical9.8 | 1.0%Oct 1, 2024 |
21Monitor | CVE-2024-39211Proof of concept | Kaiten 57.128.8 allows remote attackers to enumerate user accounts via a crafted POST request, because a login response contains a user_emaiCWE-204 | Medium5.3 | 1.1%Jul 4, 2024 |
- CVE-2024-4127639Monitor
A vulnerability in Kaiten version 57.131.12 and earlier allows attackers to bypass the PIN code authentication mechanism.
CriticalCVSS 9.8Proof of conceptEPSS 1%Oct 1, 2024
- CVE-2024-3921121Monitor
Kaiten 57.128.8 allows remote attackers to enumerate user accounts via a crafted POST request, because a login response contains a user_emai
MediumCVSS 5.3Proof of conceptEPSS 1%Jul 4, 2024