soyal records

3 published records for vendor soyal.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 0
With a fix record: 0%
Median publish → KEV: No record has entered KEV

Pre-auth RCE: flaws that let an attacker run code over the network without an account. Median publish → KEV: the typical time between a record being published and CISA listing it as exploited.

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

3 records

CVE records
Action	CVE	Vulnerability	Severity	EPSS · Published
36Monitor	CVE-2021-28269No exploit	Soyal Technology 701Client 9.0.1 is vulnerable to Insecure permissions via client.exe binary with Authenticated Users group with Full permissoyal · 701client · CWE-732	High8.8	1.8%Apr 27, 2021
36Monitor	CVE-2021-28271No exploit	Soyal Technologies SOYAL 701Server 9.0.1 suffers from an elevation of privileges vulnerability which can be used by an authenticated user tosoyal · 701clientsql · CWE-276	High8.8	1.8%Apr 27, 2021
31Monitor	CVE-2019-6451No exploit	On SOYAL AR-727H and AR-829Ev5 devices, all CGI programs allow unauthenticated POST access.soyal · ar-727h firmware · CWE-306 Pre-auth Auth bypass	High7.5	1.7%Jun 6, 2019

CVE-2021-28269
36Monitor
Soyal Technology 701Client 9.0.1 is vulnerable to Insecure permissions via client.exe binary with Authenticated Users group with Full permis
HighCVSS 8.8No exploitEPSS 1%
soyal · 701clientApr 27, 2021
CVE-2021-28271
36Monitor
Soyal Technologies SOYAL 701Server 9.0.1 suffers from an elevation of privileges vulnerability which can be used by an authenticated user to
HighCVSS 8.8No exploitEPSS 1%
soyal · 701clientsqlApr 27, 2021
CVE-2019-6451
31Monitor
On SOYAL AR-727H and AR-829Ev5 devices, all CGI programs allow unauthenticated POST access.
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
- Auth bypass
soyal · ar-727h firmwareJun 6, 2019