Vertiv records
8 published records for vendor vertiv.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3
- CWE-264 Permissions, Privileges, and Access Controls1
- CWE-269 Improper Privilege Management1
- CWE-611 Improper Restriction of XML External Entity Reference1
- CWE-732 Incorrect Permission Assignment for Critical Resource1
- CWE-95 Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')1
The weakness classes this vendor ships most often: where to look.
CWEAll records
8 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
31Monitor | CVE-2018-10079Proof of concept | Geist WatchDog Console 3.2.2 uses a weak ACL for the C:\ProgramData\WatchDog Console directory, which allows local users to modify configuravertiv · watchdog console · CWE-269 | High7.8 | — | 0.7% | Apr 20, 2018 |
31Monitor | CVE-2015-7260No exploit | Liebert MultiLink Automated Shutdown v4.2.4 allows local users to gain privileges by replacing the LiebertM executable file.vertiv · liebert multilink automated shutdown · CWE-264 | High7.8 | — | 0.3% | Apr 9, 2017 |
30Monitor | CVE-2018-12922No exploit | Emerson Liebert IntelliSlot Web Card devices allow remote attackers to reconfigure access control via the config/configUser.htm or config/covertiv · liebert intellislot firmware · CWE-732 | High7.5 | — | 1.5% | Jun 28, 2018 |
29Monitor | CVE-2019-9507No exploit | The web interface of the Vertiv Avocent UMG-4000 version 4.2.1.19 is vulnerable to arbitrary remote code executionvertiv · avocent umg-4000 firmware · CWE-95 | High7.2 | — | 2.1% | Mar 30, 2020 |
21Monitor | CVE-2018-10077Proof of concept | XML external entity (XXE) vulnerability in Geist WatchDog Console 3.2.2 allows remote authenticated administrators to read arbitrary files vvertiv · watchdog console · CWE-611 | Medium4.9 | — | 8.0% | Apr 20, 2018 |
21Monitor | CVE-2019-9509No exploit | The web interface of the Vertiv Avocent UMG-4000 version 4.2.1.19 is vulnerable to reflected cross site scriptingvertiv · avocent umg-4000 firmware · CWE-79 | Medium5.4 | — | 0.9% | Mar 30, 2020 |
20Monitor | CVE-2018-10078Proof of concept | Cross-site scripting (XSS) vulnerability in Geist WatchDog Console 3.2.2 allows remote authenticated administrators to inject arbitrary web vertiv · watchdog console · CWE-79 | Medium4.8 | — | 2.0% | Apr 20, 2018 |
14Monitor | CVE-2019-9508No exploit | Vertiv Avocent UMG-4000 version 4.2.1.19 web interface is vulnerable to stored cross site scriptingvertiv · avocent umg-4000 firmware · CWE-79 | Low3.5 | — | 0.6% | Mar 30, 2020 |
- CVE-2018-1007931Monitor
Geist WatchDog Console 3.2.2 uses a weak ACL for the C:\ProgramData\WatchDog Console directory, which allows local users to modify configura
HighCVSS 7.8Proof of conceptEPSS 0%vertiv · watchdog consoleApr 20, 2018
- CVE-2015-726031Monitor
Liebert MultiLink Automated Shutdown v4.2.4 allows local users to gain privileges by replacing the LiebertM executable file.
HighCVSS 7.8No exploitEPSS 0%vertiv · liebert multilink automated shutdownApr 9, 2017
- CVE-2018-1292230Monitor
Emerson Liebert IntelliSlot Web Card devices allow remote attackers to reconfigure access control via the config/configUser.htm or config/co
HighCVSS 7.5No exploitEPSS 1%vertiv · liebert intellislot firmwareJun 28, 2018
- CVE-2019-950729Monitor
The web interface of the Vertiv Avocent UMG-4000 version 4.2.1.19 is vulnerable to arbitrary remote code execution
HighCVSS 7.2No exploitEPSS 2%vertiv · avocent umg-4000 firmwareMar 30, 2020
- CVE-2018-1007721Monitor
XML external entity (XXE) vulnerability in Geist WatchDog Console 3.2.2 allows remote authenticated administrators to read arbitrary files v
MediumCVSS 4.9Proof of conceptEPSS 8%vertiv · watchdog consoleApr 20, 2018
- CVE-2019-950921Monitor
The web interface of the Vertiv Avocent UMG-4000 version 4.2.1.19 is vulnerable to reflected cross site scripting
MediumCVSS 5.4No exploitEPSS 0%vertiv · avocent umg-4000 firmwareMar 30, 2020
- CVE-2018-1007820Monitor
Cross-site scripting (XSS) vulnerability in Geist WatchDog Console 3.2.2 allows remote authenticated administrators to inject arbitrary web
MediumCVSS 4.8Proof of conceptEPSS 2%vertiv · watchdog consoleApr 20, 2018
- CVE-2019-950814Monitor
Vertiv Avocent UMG-4000 version 4.2.1.19 web interface is vulnerable to stored cross site scripting
LowCVSS 3.5No exploitEPSS 0%vertiv · avocent umg-4000 firmwareMar 30, 2020