tailscale records

3 published records for vendor tailscale.

Researcher profile

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

3 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
39Monitor	CVE-2022-41924Proof of concept	Tailscale Windows daemon is vulnerable to RCE via CSRFtailscale · tailscale · CWE-346 pre-auth RCE CSRF	Critical9.6	—	1.8%	Nov 23, 2022
35Monitor	CVE-2022-41925No exploit	Tailscale daemon is vulnerable to information disclosure via CSRFtailscale · tailscale · CWE-352 Pre-auth CSRF	High8.8	—	0.6%	Nov 23, 2022
32Monitor	CVE-2023-28436No exploit	Non-interactive Tailscale SSH sessions on FreeBSD may use the effective group ID of the tailscaled processtailscale · tailscale · CWE-269	High8.0	—	0.5%	Mar 23, 2023

CVE-2022-41924
39Monitor
Tailscale Windows daemon is vulnerable to RCE via CSRF
CriticalCVSS 9.6Proof of conceptEPSS 2%
- pre-auth RCE
- CSRF
tailscale · tailscaleNov 23, 2022
CVE-2022-41925
35Monitor
Tailscale daemon is vulnerable to information disclosure via CSRF
HighCVSS 8.8No exploitEPSS 1%
- Pre-auth
- CSRF
tailscale · tailscaleNov 23, 2022
CVE-2023-28436
32Monitor
Non-interactive Tailscale SSH sessions on FreeBSD may use the effective group ID of the tailscaled process
HighCVSS 8.0No exploitEPSS 0%
tailscale · tailscaleMar 23, 2023