pentasecurity records

4 published records for vendor pentasecurity.

Researcher profile

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

4 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
44Plan	CVE-2022-35413Proof of concept	WAPPLES through 6.0 has a hardcoded systemi account.pentasecurity · wapples · CWE-798 Pre-auth Hard-coded credentials	Critical9.8	—	17.9%	Sep 13, 2022
35Monitor	CVE-2022-35582No exploit	Penta Security Systems Inc WAPPLES 4.0., 5.0.0., 5.0.12.* are vulnerable to Incorrect Access Control.pentasecurity · wapples · CWE-798 Hard-coded credentials	High8.8	—	0.8%	Sep 13, 2022
31Monitor	CVE-2022-31322No exploit	Penta Security Systems Inc WAPPLES v6.0 r3 4.10-hotfix1 allows attackers to escalate privileges via overwriting files using SUID flagged exepentasecurity · wapples · CWE-798 Local privilege escalation Hard-coded credentials	High7.8	—	0.3%	Sep 13, 2022
26Monitor	CVE-2022-31324No exploit	An arbitrary file download vulnerability in the downloadAction() function of Penta Security Systems Inc WAPPLES v6.0 r3 4.10-hotfix1 allows pentasecurity · wapples · CWE-494	Medium6.5	—	0.4%	Sep 13, 2022

CVE-2022-35413
44Plan
WAPPLES through 6.0 has a hardcoded systemi account.
CriticalCVSS 9.8Proof of conceptEPSS 17%
- Pre-auth
- Hard-coded credentials
pentasecurity · wapplesSep 13, 2022
CVE-2022-35582
35Monitor
Penta Security Systems Inc WAPPLES 4.0.*, 5.0.0.*, 5.0.12.* are vulnerable to Incorrect Access Control.
HighCVSS 8.8No exploitEPSS 0%
- Hard-coded credentials
pentasecurity · wapplesSep 13, 2022
CVE-2022-31322
31Monitor
Penta Security Systems Inc WAPPLES v6.0 r3 4.10-hotfix1 allows attackers to escalate privileges via overwriting files using SUID flagged exe
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
- Hard-coded credentials
pentasecurity · wapplesSep 13, 2022
CVE-2022-31324
26Monitor
An arbitrary file download vulnerability in the downloadAction() function of Penta Security Systems Inc WAPPLES v6.0 r3 4.10-hotfix1 allows
MediumCVSS 6.5No exploitEPSS 0%
pentasecurity · wapplesSep 13, 2022