ericssonlg records
5 published records for vendor ericssonlg.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-267 Privilege Defined With Unsafe Actions1
- CWE-522 Insufficiently Protected Credentials1
- CWE-732 Incorrect Permission Assignment for Critical Resource1
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')1
The weakness classes this vendor ships most often: where to look.
CWEAll records
5 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
43Plan | CVE-2018-10285Proof of concept | The Ericsson-LG iPECS NMS A.1Ac web application uses incorrect access control mechanisms.ericssonlg · ipecs nms · CWE-732 | Critical9.8 | — | 12.5% | Apr 22, 2018 |
40Plan | CVE-2018-9245Proof of concept | The Ericsson-LG iPECS NMS A.1Ac login portal has a SQL injection vulnerability in the User ID and password fields that allows users to bypasericssonlg · ipecs nms · CWE-89 | Critical9.8 | — | 3.9% | Apr 22, 2018 |
37Monitor | CVE-2018-10286Proof of concept | The Ericsson-LG iPECS NMS A.1Ac web application discloses sensitive information such as the NMS admin credentials and the PostgreSQL databasericssonlg · ipecs nms · CWE-522 | High8.8 | — | 6.2% | Apr 22, 2018 |
34Monitor | CVE-2018-15138Proof of concept | Ericsson-LG iPECS NMS 30M allows directory traversal via ipecs-cm/download?filename=../ URIs.ericssonlg · ipecs nms · CWE-22 | High7.5 | — | 12.6% | Aug 15, 2018 |
26Monitor | CVE-2020-7824No exploit | Ericssonlg iPECS Privilege Escalation Vulnerabilityericssonlg · ipecs · CWE-267 | Medium6.5 | — | 1.0% | Aug 25, 2020 |
- CVE-2018-1028543Plan
The Ericsson-LG iPECS NMS A.1Ac web application uses incorrect access control mechanisms.
CriticalCVSS 9.8Proof of conceptEPSS 12%ericssonlg · ipecs nmsApr 22, 2018
- CVE-2018-924540Plan
The Ericsson-LG iPECS NMS A.1Ac login portal has a SQL injection vulnerability in the User ID and password fields that allows users to bypas
CriticalCVSS 9.8Proof of conceptEPSS 3%ericssonlg · ipecs nmsApr 22, 2018
- CVE-2018-1028637Monitor
The Ericsson-LG iPECS NMS A.1Ac web application discloses sensitive information such as the NMS admin credentials and the PostgreSQL databas
HighCVSS 8.8Proof of conceptEPSS 6%ericssonlg · ipecs nmsApr 22, 2018
- CVE-2018-1513834Monitor
Ericsson-LG iPECS NMS 30M allows directory traversal via ipecs-cm/download?filename=../ URIs.
HighCVSS 7.5Proof of conceptEPSS 12%ericssonlg · ipecs nmsAug 15, 2018
- CVE-2020-782426Monitor
Ericssonlg iPECS Privilege Escalation Vulnerability
MediumCVSS 6.5No exploitEPSS 1%ericssonlg · ipecsAug 25, 2020