Carrier kayıtları

carrier üreticisine ait 17 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren: 0 · %0
Silahlaştırılmış: 0 · %0
Pre-auth RCE: 3
Düzeltme kaydı olan: %0
Yayından KEV’e ortanca: KEV’e giren kayıt yok

Yıllara göre kayıt

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

Saldırı profili

Tüm kayıtlar

17 kayıt

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
40Planlayın	CVE-2022-31479İstismar yok	Remote Code Execution via command injection of the hostnamehidglobal · lp1501 firmware · CWE-693 pre-auth RCE Komut enjeksiyonu	Kritik9,8	—	%2,4	6 Haz 2022
40Planlayın	CVE-2022-31481İstismar yok	Remote Code Execution via buffer overflow in firmware update processhidglobal · lp1501 firmware · CWE-120 pre-auth RCE Bellek hatası	Kritik10,0	—	%1,6	6 Haz 2022
36İzleyin	CVE-2022-31483İstismar yok	Arbitrary file write via authenticated OSDP file uploadhidglobal · lp1501 firmware · CWE-22 Yol geçişi	Yüksek8,8	—	%1,8	6 Haz 2022
35İzleyin	CVE-2022-31486İstismar yok	Command injection via Advanced Networking route add functionalityhidglobal · lp1501 firmware · CWE-78 RCE Komut enjeksiyonu	Yüksek8,8	—	%1,4	6 Haz 2022
32İzleyin	CVE-2017-9650Kavram kanıtı	An Unrestricted Upload of File with Dangerous Type issue was discovered in Automated Logic Corporation (ALC) ALC WebCTRL, i-Vu, SiteScan Webautomatedlogic · i-vu · CWE-434 RCE Dosya yükleme	Yüksek7,8	—	%2,4	25 Ağu 2017
31İzleyin	CVE-2018-8819İstismar yok	An XXE issue was discovered in Automated Logic Corporation (ALC) WebCTRL Versions 6.0, 6.1 and 6.5.carrier · automatedlogic webctrl · CWE-611 Kimlik doğrulamasız XXE	Yüksek7,5	—	%3,0	14 Haz 2018
30İzleyin	CVE-2016-5795İstismar yok	An XXE issue was discovered in Automated Logic Corporation (ALC) Liebert SiteScan Web Version 6.5 and prior, ALC WebCTRL Version 6.5 and priautomatedlogic · i-vu · CWE-611 pre-auth RCE XXE	Yüksek7,3	—	%2,2	31 Ağu 2017
30İzleyin	CVE-2022-31484İstismar yok	User Account Deletion Unauthenticatedhidglobal · lp1501 firmware · CWE-425 Kimlik doğrulamasız Hizmet dışı bırakma	Yüksek7,5	—	%1,0	6 Haz 2022
30İzleyin	CVE-2022-31482İstismar yok	Denial-of-Service via internal structure overflowhidglobal · lp1501 firmware · CWE-120 Kimlik doğrulamasız Bellek hatası Hizmet dışı bırakma	Yüksek7,5	—	%1,0	6 Haz 2022
30İzleyin	CVE-2022-31480İstismar yok	Unauthenticated Firmware Upload and Arbitrary Reboothidglobal · lp1501 firmware · CWE-425 Kimlik doğrulamasız Hizmet dışı bırakma	Yüksek7,5	—	%1,0	6 Haz 2022
28İzleyin	CVE-2017-9640Kavram kanıtı	A Path Traversal issue was discovered in Automated Logic Corporation (ALC) ALC WebCTRL, i-Vu, SiteScan Web prior to 6.5; ALC WebCTRL, SiteScautomatedlogic · i-vu · CWE-22 Yol geçişi	Orta6,3	—	%8,5	25 Ağu 2017
28İzleyin	CVE-2017-9644Kavram kanıtı	An Unquoted Search Path or Element issue was discovered in Automated Logic Corporation (ALC) ALC WebCTRL, i-Vu, SiteScan Web 6.5 and prior; automatedlogic · i-vu · CWE-428 RCE Yerel yetki yükseltme	Yüksek7,0	—	%1,4	25 Ağu 2017
28İzleyin	CVE-2024-10930Kavram kanıtı	Carrier Block Load Privilege Escalationcarrier · block load · CWE-427 RCE Yerel yetki yükseltme	Yüksek7,1	—	%0,4	4 Mar 2025
24İzleyin	CVE-2020-19762İstismar yok	Automated Logic Corporation (ALC) WebCTRL System 6.5 and prior allows remote attackers to execute any JavaScript code via a XSS payload for carrier · webctrl system · CWE-79 Kimlik doğrulamasız XSS	Orta6,1	—	%1,0	22 Şub 2021
22İzleyin	CVE-2022-26519İstismar yok	Interlogix Hills ComNav Improper Restriction of Excessive Authentication Attemptscarrier · hills comnav firmware · CWE-307	Orta5,5	—	%0,2	20 Nis 2022
22İzleyin	CVE-2022-1318İstismar yok	Hills ComNav Inadequate Encryption Strengthcarrier · hills comnav firmware · CWE-326 Zayıf kripto	Orta5,5	—	%0,1	20 Nis 2022
21İzleyin	CVE-2022-31485İstismar yok	Unauthenticated homepage note modificationhidglobal · lp1501 firmware · CWE-425 Kimlik doğrulamasız	Orta5,3	—	%0,8	6 Haz 2022

CVE-2022-31479
40Planlayın
Remote Code Execution via command injection of the hostname
KritikCVSS 9,8İstismar yokEPSS %2
- pre-auth RCE
- Komut enjeksiyonu
hidglobal · lp1501 firmware6 Haz 2022
CVE-2022-31481
40Planlayın
Remote Code Execution via buffer overflow in firmware update process
KritikCVSS 10,0İstismar yokEPSS %2
- pre-auth RCE
- Bellek hatası
hidglobal · lp1501 firmware6 Haz 2022
CVE-2022-31483
36İzleyin
Arbitrary file write via authenticated OSDP file upload
YüksekCVSS 8,8İstismar yokEPSS %2
- Yol geçişi
hidglobal · lp1501 firmware6 Haz 2022
CVE-2022-31486
35İzleyin
Command injection via Advanced Networking route add functionality
YüksekCVSS 8,8İstismar yokEPSS %1
- RCE
- Komut enjeksiyonu
hidglobal · lp1501 firmware6 Haz 2022
CVE-2017-9650
32İzleyin
An Unrestricted Upload of File with Dangerous Type issue was discovered in Automated Logic Corporation (ALC) ALC WebCTRL, i-Vu, SiteScan Web
YüksekCVSS 7,8Kavram kanıtıEPSS %2
- RCE
- Dosya yükleme
automatedlogic · i-vu25 Ağu 2017
CVE-2018-8819
31İzleyin
An XXE issue was discovered in Automated Logic Corporation (ALC) WebCTRL Versions 6.0, 6.1 and 6.5.
YüksekCVSS 7,5İstismar yokEPSS %3
- Kimlik doğrulamasız
- XXE
carrier · automatedlogic webctrl14 Haz 2018
CVE-2016-5795
30İzleyin
An XXE issue was discovered in Automated Logic Corporation (ALC) Liebert SiteScan Web Version 6.5 and prior, ALC WebCTRL Version 6.5 and pri
YüksekCVSS 7,3İstismar yokEPSS %2
- pre-auth RCE
- XXE
automatedlogic · i-vu31 Ağu 2017
CVE-2022-31484
30İzleyin
User Account Deletion Unauthenticated
YüksekCVSS 7,5İstismar yokEPSS %1
- Kimlik doğrulamasız
- Hizmet dışı bırakma
hidglobal · lp1501 firmware6 Haz 2022
CVE-2022-31482
30İzleyin
Denial-of-Service via internal structure overflow
YüksekCVSS 7,5İstismar yokEPSS %1
hidglobal · lp1501 firmware6 Haz 2022
CVE-2022-31480
30İzleyin
Unauthenticated Firmware Upload and Arbitrary Reboot
YüksekCVSS 7,5İstismar yokEPSS %1
- Kimlik doğrulamasız
- Hizmet dışı bırakma
hidglobal · lp1501 firmware6 Haz 2022
CVE-2017-9640
28İzleyin
A Path Traversal issue was discovered in Automated Logic Corporation (ALC) ALC WebCTRL, i-Vu, SiteScan Web prior to 6.5; ALC WebCTRL, SiteSc
OrtaCVSS 6,3Kavram kanıtıEPSS %8
- Yol geçişi
automatedlogic · i-vu25 Ağu 2017
CVE-2017-9644
28İzleyin
An Unquoted Search Path or Element issue was discovered in Automated Logic Corporation (ALC) ALC WebCTRL, i-Vu, SiteScan Web 6.5 and prior;
YüksekCVSS 7,0Kavram kanıtıEPSS %1
- RCE
- Yerel yetki yükseltme
automatedlogic · i-vu25 Ağu 2017
CVE-2024-10930
28İzleyin
Carrier Block Load Privilege Escalation
YüksekCVSS 7,1Kavram kanıtıEPSS %0
- RCE
- Yerel yetki yükseltme
carrier · block load4 Mar 2025
CVE-2020-19762
24İzleyin
Automated Logic Corporation (ALC) WebCTRL System 6.5 and prior allows remote attackers to execute any JavaScript code via a XSS payload for
OrtaCVSS 6,1İstismar yokEPSS %1
- Kimlik doğrulamasız
- XSS
carrier · webctrl system22 Şub 2021
CVE-2022-26519
22İzleyin
Interlogix Hills ComNav Improper Restriction of Excessive Authentication Attempts
OrtaCVSS 5,5İstismar yokEPSS %0
carrier · hills comnav firmware20 Nis 2022
CVE-2022-1318
22İzleyin
Hills ComNav Inadequate Encryption Strength
OrtaCVSS 5,5İstismar yokEPSS %0
- Zayıf kripto
carrier · hills comnav firmware20 Nis 2022
CVE-2022-31485
21İzleyin
Unauthenticated homepage note modification
OrtaCVSS 5,3İstismar yokEPSS %1
- Kimlik doğrulamasız
hidglobal · lp1501 firmware6 Haz 2022