Daan Keuper, Thijs Alkemade and Khaled Nassar
Computest Sector 7 reported to ZDI.
6 kredili kayıt · son 12 ayda 0 · 1 tanesi CISA KEV’de
Adlar CNA kayıtlarındaki serbest metindir; aynı kişi farklı yazımlarla ayrı görünebilir. Düzeltme için bize yazın.
Kredili kayıtlar
Araştırmacılar| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
35İzleyin | CVE-2024-23971İstismar yok | ChargePoint Home Flex OCPP bswitch Command Injectionchargepoint · home flex nema 14-50 plug firmware · CWE-77 | Yüksek8,8 | — | %0,5 | 30 Oca 2025 |
26İzleyin | CVE-2024-23970İstismar yok | ChargePoint Home Flex Improper Certificate Validationchargepoint · home flex nema 14-50 plug firmware · CWE-295 | Orta6,5 | — | %0,2 | 30 Oca 2025 |
31İzleyin | CVE-2024-53706İstismar yok | A vulnerability in the Gen7 SonicOS Cloud platform NSv, allows a remote authenticated local low-privileged attacker to elevate privileges tosonicwall · sonicos · CWE-269 | Yüksek7,8 | — | %0,3 | 9 Oca 2025 |
30İzleyin | CVE-2024-53705İstismar yok | A Server-Side Request Forgery vulnerability in the SonicOS SSH management interface allows a remote attacker to establish a TCP connection tsonicwall · sonicos · CWE-918 | Yüksek7,5 | — | %0,7 | 9 Oca 2025 |
98Hemen | CVE-2024-53704Silahlaştırılmış | An Improper Authentication vulnerability in the SSLVPN authentication mechanism allows a remote attacker to bypass authentication.sonicwall · sonicos · CWE-287 | Kritik9,8 | KEV | %95,1 | 9 Oca 2025 |
39İzleyin | CVE-2024-40762İstismar yok | Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in the SonicOS SSLVPN authentication token generator that, in certain casonicwall · sonicos · CWE-338 | Kritik9,8 | — | %1,0 | 9 Oca 2025 |
- CVE-2024-2397135İzleyin
ChargePoint Home Flex OCPP bswitch Command Injection
YüksekCVSS 8,8İstismar yokEPSS %0chargepoint · home flex nema 14-50 plug firmware30 Oca 2025
- CVE-2024-2397026İzleyin
ChargePoint Home Flex Improper Certificate Validation
OrtaCVSS 6,5İstismar yokEPSS %0chargepoint · home flex nema 14-50 plug firmware30 Oca 2025
- CVE-2024-5370631İzleyin
A vulnerability in the Gen7 SonicOS Cloud platform NSv, allows a remote authenticated local low-privileged attacker to elevate privileges to
YüksekCVSS 7,8İstismar yokEPSS %0sonicwall · sonicos9 Oca 2025
- CVE-2024-5370530İzleyin
A Server-Side Request Forgery vulnerability in the SonicOS SSH management interface allows a remote attacker to establish a TCP connection t
YüksekCVSS 7,5İstismar yokEPSS %1sonicwall · sonicos9 Oca 2025
- CVE-2024-5370498Hemen
An Improper Authentication vulnerability in the SSLVPN authentication mechanism allows a remote attacker to bypass authentication.
KritikCVSS 9,8KEVSilahlaştırılmışEPSS %95sonicwall · sonicos9 Oca 2025
- CVE-2024-4076239İzleyin
Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in the SonicOS SSLVPN authentication token generator that, in certain ca
KritikCVSS 9,8İstismar yokEPSS %1sonicwall · sonicos9 Oca 2025