Skip to content
Noroxi

loftware records

8 published records for vendor loftware.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 24

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

8 records
  • CVE-2023-37227
    39Monitor

    Loftware Spectrum before 4.6 HF13 Deserializes Untrusted Data.

    CriticalCVSS 9.8No exploitEPSS 1%

    loftware · spectrumSep 10, 2024

  • CVE-2023-37226
    39Monitor

    Loftware Spectrum before 4.6 HF14 has Missing Authentication for a Critical Function.

    CriticalCVSS 9.8No exploitEPSS 1%

    loftware · spectrumSep 10, 2024

  • CVE-2023-37231
    39Monitor

    Loftware Spectrum before 4.6 HF14 uses a Hard-coded Password.

    CriticalCVSS 9.8No exploitEPSS 1%

    loftware · spectrumSep 10, 2024

  • CVE-2023-37234
    39Monitor

    Loftware Spectrum through 4.6 has unprotected JMX Registry.

    CriticalCVSS 9.8No exploitEPSS 0%

    loftware · spectrumSep 10, 2024

  • CVE-2023-37233
    35Monitor

    Loftware Spectrum before 4.6 HF14 allows authenticated XXE attacks.

    HighCVSS 8.8No exploitEPSS 0%

    loftware · spectrumSep 10, 2024

  • CVE-2023-37230
    35Monitor

    Loftware Spectrum (testDeviceConnection) before 5.1 allows SSRF.

    HighCVSS 8.8No exploitEPSS 0%

    loftware · spectrumSep 10, 2024

  • CVE-2023-37229
    35Monitor

    Loftware Spectrum before 5.1 allows SSRF.

    HighCVSS 8.8No exploitEPSS 0%

    loftware · spectrumSep 10, 2024

  • CVE-2023-37232
    30Monitor

    Loftware Spectrum through 4.6 exposes Sensitive Information (Logs) to an Unauthorized Actor.

    HighCVSS 7.5No exploitEPSS 0%

    loftware · spectrumSep 10, 2024