ucopia records

9 published records for vendor ucopia.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 1
With a fix record: 0%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

9 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
40Plan	CVE-2022-44720No exploit	An issue was discovered in Weblib Ucopia before 6.0.13.ucopia · wireless appliance firmware · CWE-78 pre-auth RCE Command injection	Critical9.8	—	2.6%	Jun 29, 2023
36Monitor	CVE-2020-25036No exploit	UCOPIA Wi-Fi appliances 6.0.5 allow authenticated remote attackers to escape the restricted administration shell CLI, and access a shell witucopia · ucopia wireless appliance · CWE-78 RCE Command injection	High8.8	—	2.0%	Feb 2, 2021
35Monitor	CVE-2018-15481No exploit	Improper input sanitization within the restricted administration shell on UCOPIA Wireless Appliance devices using firmware version 5.1.x befucopia · wireless appliance firmware · CWE-78 RCE Command injection	High8.8	—	1.3%	Aug 21, 2018
34Monitor	CVE-2017-11322Proof of concept	The chroothole_client executable in UCOPIA Wireless Appliance before 5.1.8 allows remote attackers to gain root privileges via a dollar signucopia · ucopia wireless appliance · CWE-78 RCE Local privilege escalation Command injection	High8.2	—	5.1%	Oct 2, 2017
32Monitor	CVE-2020-25037No exploit	UCOPIA Wi-Fi appliances 6.0.5 allow arbitrary code execution with admin user privileges via an escape from a restricted command.ucopia · ucopia wireless appliance · CWE-434 RCE File upload Local privilege escalation	High8.2	—	0.5%	Feb 2, 2021
31Monitor	CVE-2017-11321Proof of concept	The restricted shell interface in UCOPIA Wireless Appliance before 5.1.8 allows remote authenticated users to gain 'admin' privileges via shucopia · wireless appliance · CWE-78 RCE Command injection	High7.2	—	8.3%	Oct 2, 2017
30Monitor	CVE-2022-44719No exploit	An issue was discovered in Weblib Ucopia before 6.0.13.ucopia · wireless appliance firmware · CWE-732 Pre-auth	High7.5	—	0.7%	Jun 29, 2023
26Monitor	CVE-2017-17743No exploit	Improper input sanitization within the restricted administration shell on UCOPIA Wireless Appliance devices before 4.4.20, 5.0.x before 5.0.ucopia · wireless appliance firmware · CWE-287 Auth bypass Local privilege escalation Hard-coded credentials	Medium6.7	—	1.1%	Mar 22, 2018
26Monitor	CVE-2020-25035No exploit	UCOPIA Wi-Fi appliances 6.0.5 allow arbitrary code execution with root privileges using chroothole_client's PHP call, a related issue to CVEucopia · express wireless appliance RCE Local privilege escalation	Medium6.7	—	0.5%	Feb 2, 2021

CVE-2022-44720
40Plan
An issue was discovered in Weblib Ucopia before 6.0.13.
CriticalCVSS 9.8No exploitEPSS 3%
- pre-auth RCE
- Command injection
ucopia · wireless appliance firmwareJun 29, 2023
CVE-2020-25036
36Monitor
UCOPIA Wi-Fi appliances 6.0.5 allow authenticated remote attackers to escape the restricted administration shell CLI, and access a shell wit
HighCVSS 8.8No exploitEPSS 2%
- RCE
- Command injection
ucopia · ucopia wireless applianceFeb 2, 2021
CVE-2018-15481
35Monitor
Improper input sanitization within the restricted administration shell on UCOPIA Wireless Appliance devices using firmware version 5.1.x bef
HighCVSS 8.8No exploitEPSS 1%
- RCE
- Command injection
ucopia · wireless appliance firmwareAug 21, 2018
CVE-2017-11322
34Monitor
The chroothole_client executable in UCOPIA Wireless Appliance before 5.1.8 allows remote attackers to gain root privileges via a dollar sign
HighCVSS 8.2Proof of conceptEPSS 5%
ucopia · ucopia wireless applianceOct 2, 2017
CVE-2020-25037
32Monitor
UCOPIA Wi-Fi appliances 6.0.5 allow arbitrary code execution with admin user privileges via an escape from a restricted command.
HighCVSS 8.2No exploitEPSS 1%
ucopia · ucopia wireless applianceFeb 2, 2021
CVE-2017-11321
31Monitor
The restricted shell interface in UCOPIA Wireless Appliance before 5.1.8 allows remote authenticated users to gain 'admin' privileges via sh
HighCVSS 7.2Proof of conceptEPSS 8%
- RCE
- Command injection
ucopia · wireless applianceOct 2, 2017
CVE-2022-44719
30Monitor
An issue was discovered in Weblib Ucopia before 6.0.13.
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
ucopia · wireless appliance firmwareJun 29, 2023
CVE-2017-17743
26Monitor
Improper input sanitization within the restricted administration shell on UCOPIA Wireless Appliance devices before 4.4.20, 5.0.x before 5.0.
MediumCVSS 6.7No exploitEPSS 1%
ucopia · wireless appliance firmwareMar 22, 2018
CVE-2020-25035
26Monitor
UCOPIA Wi-Fi appliances 6.0.5 allow arbitrary code execution with root privileges using chroothole_client's PHP call, a related issue to CVE
MediumCVSS 6.7No exploitEPSS 1%
- RCE
- Local privilege escalation
ucopia · express wireless applianceFeb 2, 2021