onkyo records

2 published records for vendor onkyo.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 0
With a fix record: 0%
Median publish → KEV: No record has entered KEV

Pre-auth RCE: flaws that let an attacker run code over the network without an account. Median publish → KEV: the typical time between a record being published and CISA listing it as exploited.

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

2 records

CVE records
Action	CVE	Vulnerability	Severity	EPSS · Published
34Monitor	CVE-2020-12447Proof of concept	A Local File Inclusion (LFI) issue on Onkyo TX-NR585 1000-0000-000-0008-0000 devices allows remote unauthenticated users on the network to ronkyo · tx-nr585 firmware · CWE-22 Pre-auth Path traversal	High7.5	13.7%Apr 28, 2020
31Monitor	CVE-2019-6113No exploit	Directory traversal vulnerability on ONKYO TX-NR686 1030-5000-1040-0010 A/V Receiver devices allows remote attackers to read arbitrary filesonkyo · tx-nr686 firmware · CWE-22 Pre-auth Path traversal	High7.5	2.9%Aug 30, 2019

CVE-2020-12447
34Monitor
A Local File Inclusion (LFI) issue on Onkyo TX-NR585 1000-0000-000-0008-0000 devices allows remote unauthenticated users on the network to r
HighCVSS 7.5Proof of conceptEPSS 13%
- Pre-auth
- Path traversal
onkyo · tx-nr585 firmwareApr 28, 2020
CVE-2019-6113
31Monitor
Directory traversal vulnerability on ONKYO TX-NR686 1030-5000-1040-0010 A/V Receiver devices allows remote attackers to read arbitrary files
HighCVSS 7.5No exploitEPSS 2%
- Pre-auth
- Path traversal
onkyo · tx-nr686 firmwareAug 30, 2019