company records
4 published records for vendor company.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Pre-auth RCE: flaws that let an attacker run code over the network without an account. Median publish → KEV: the typical time between a record being published and CISA listing it as exploited.
Recurring classes
- CWE-787 Out-of-bounds Write2
- CWE-347 Improper Verification of Cryptographic Signature1
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')1
The weakness classes this vendor ships most often: where to look.
CWEAll records
4 records| Action | CVE | Vulnerability | Severity | EPSS · Published |
|---|---|---|---|---|
39Monitor | CVE-2020-27539No exploit | Heap overflow with full parsing of HTTP respose in Rostelecom CS-C2SHW 5.0.082.1.company · cs-c2shw firmware · CWE-787 | Critical9.8 | 1.2%Jan 26, 2021 |
39Monitor | CVE-2020-27540No exploit | Bash injection vulnerability and bypass of signature verification in Rostelecom CS-C2SHW 5.0.082.1.company · cs-c2shw firmware · CWE-347 | Critical9.8 | 0.8%Jan 26, 2021 |
30Monitor | CVE-2020-27541No exploit | Denial of Service vulnerability in Rostelecom CS-C2SHW 5.0.082.1.company · cs-c2shw firmware · CWE-787 | High7.5 | 1.1%Jan 26, 2021 |
27Monitor | CVE-2020-27542No exploit | Rostelecom CS-C2SHW 5.0.082.1 is affected by: Bash command injection.company · cs-c2shw firmware · CWE-78 | Medium6.8 | 1.1%Jan 26, 2021 |
- CVE-2020-2753939Monitor
Heap overflow with full parsing of HTTP respose in Rostelecom CS-C2SHW 5.0.082.1.
CriticalCVSS 9.8No exploitEPSS 1%company · cs-c2shw firmwareJan 26, 2021
- CVE-2020-2754039Monitor
Bash injection vulnerability and bypass of signature verification in Rostelecom CS-C2SHW 5.0.082.1.
CriticalCVSS 9.8No exploitEPSS 0%company · cs-c2shw firmwareJan 26, 2021
- CVE-2020-2754130Monitor
Denial of Service vulnerability in Rostelecom CS-C2SHW 5.0.082.1.
HighCVSS 7.5No exploitEPSS 1%company · cs-c2shw firmwareJan 26, 2021
- CVE-2020-2754227Monitor
Rostelecom CS-C2SHW 5.0.082.1 is affected by: Bash command injection.
MediumCVSS 6.8No exploitEPSS 1%company · cs-c2shw firmwareJan 26, 2021