gryphonconnect kayıtları
gryphonconnect üreticisine ait 10 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 7
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')7
- CWE-287 Improper Authentication1
- CWE-522 Insufficiently Protected Credentials1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
10 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
40Planlayın | CVE-2021-20146İstismar yok | An unprotected ssh private key exists on the Gryphon devices which could be used to achieve root access to a server affiliated with Gryphon'gryphonconnect · gryphon tower firmware · CWE-522 | Kritik9,8 | — | %2,0 | 9 Ara 2021 |
36İzleyin | CVE-2021-20140İstismar yok | An unauthenticated command injection vulnerability exists in the parameters of operation 10 in the controller_server service on Gryphon Towegryphonconnect · gryphon tower firmware · CWE-78 | Yüksek8,8 | — | %3,9 | 9 Ara 2021 |
36İzleyin | CVE-2021-20139İstismar yok | An unauthenticated command injection vulnerability exists in the parameters of operation 3 in the controller_server service on Gryphon Towergryphonconnect · gryphon tower firmware · CWE-78 | Yüksek8,8 | — | %3,9 | 9 Ara 2021 |
36İzleyin | CVE-2021-20142İstismar yok | An unauthenticated command injection vulnerability exists in the parameters of operation 41 in the controller_server service on Gryphon Towegryphonconnect · gryphon tower firmware · CWE-78 | Yüksek8,8 | — | %3,7 | 9 Ara 2021 |
36İzleyin | CVE-2021-20141İstismar yok | An unauthenticated command injection vulnerability exists in the parameters of operation 32 in the controller_server service on Gryphon Towegryphonconnect · gryphon tower firmware · CWE-78 | Yüksek8,8 | — | %3,7 | 9 Ara 2021 |
36İzleyin | CVE-2021-20143İstismar yok | An unauthenticated command injection vulnerability exists in the parameters of operation 48 in the controller_server service on Gryphon Towegryphonconnect · gryphon tower firmware · CWE-78 | Yüksek8,8 | — | %3,7 | 9 Ara 2021 |
36İzleyin | CVE-2021-20144İstismar yok | An unauthenticated command injection vulnerability exists in the parameters of operation 49 in the controller_server service on Gryphon Towegryphonconnect · gryphon tower firmware · CWE-78 | Yüksek8,8 | — | %3,7 | 9 Ara 2021 |
36İzleyin | CVE-2021-20138Kavram kanıtı | An unauthenticated command injection vulnerability exists in multiple parameters in the Gryphon Tower router’s web interface at /cgi-bin/lucgryphonconnect · gryphon tower firmware · CWE-78 | Yüksek8,8 | — | %3,7 | 9 Ara 2021 |
30İzleyin | CVE-2021-20145İstismar yok | Gryphon Tower routers contain an unprotected openvpn configuration file which can grant attackers access to the Gryphon homebound VPN networgryphonconnect · gryphon tower firmware · CWE-287 | Yüksek7,5 | — | %1,2 | 9 Ara 2021 |
25İzleyin | CVE-2021-20137Kavram kanıtı | A reflected cross-site scripting vulnerability exists in the url parameter of the /cgi-bin/luci/site_access/ page on the Gryphon Tower routegryphonconnect · gryphon tower firmware · CWE-79 | Orta6,1 | — | %2,3 | 9 Ara 2021 |
- CVE-2021-2014640Planlayın
An unprotected ssh private key exists on the Gryphon devices which could be used to achieve root access to a server affiliated with Gryphon'
KritikCVSS 9,8İstismar yokEPSS %2gryphonconnect · gryphon tower firmware9 Ara 2021
- CVE-2021-2014036İzleyin
An unauthenticated command injection vulnerability exists in the parameters of operation 10 in the controller_server service on Gryphon Towe
YüksekCVSS 8,8İstismar yokEPSS %3gryphonconnect · gryphon tower firmware9 Ara 2021
- CVE-2021-2013936İzleyin
An unauthenticated command injection vulnerability exists in the parameters of operation 3 in the controller_server service on Gryphon Tower
YüksekCVSS 8,8İstismar yokEPSS %3gryphonconnect · gryphon tower firmware9 Ara 2021
- CVE-2021-2014236İzleyin
An unauthenticated command injection vulnerability exists in the parameters of operation 41 in the controller_server service on Gryphon Towe
YüksekCVSS 8,8İstismar yokEPSS %3gryphonconnect · gryphon tower firmware9 Ara 2021
- CVE-2021-2014136İzleyin
An unauthenticated command injection vulnerability exists in the parameters of operation 32 in the controller_server service on Gryphon Towe
YüksekCVSS 8,8İstismar yokEPSS %3gryphonconnect · gryphon tower firmware9 Ara 2021
- CVE-2021-2014336İzleyin
An unauthenticated command injection vulnerability exists in the parameters of operation 48 in the controller_server service on Gryphon Towe
YüksekCVSS 8,8İstismar yokEPSS %3gryphonconnect · gryphon tower firmware9 Ara 2021
- CVE-2021-2014436İzleyin
An unauthenticated command injection vulnerability exists in the parameters of operation 49 in the controller_server service on Gryphon Towe
YüksekCVSS 8,8İstismar yokEPSS %3gryphonconnect · gryphon tower firmware9 Ara 2021
- CVE-2021-2013836İzleyin
An unauthenticated command injection vulnerability exists in multiple parameters in the Gryphon Tower router’s web interface at /cgi-bin/luc
YüksekCVSS 8,8Kavram kanıtıEPSS %3gryphonconnect · gryphon tower firmware9 Ara 2021
- CVE-2021-2014530İzleyin
Gryphon Tower routers contain an unprotected openvpn configuration file which can grant attackers access to the Gryphon homebound VPN networ
YüksekCVSS 7,5İstismar yokEPSS %1gryphonconnect · gryphon tower firmware9 Ara 2021
- CVE-2021-2013725İzleyin
A reflected cross-site scripting vulnerability exists in the url parameter of the /cgi-bin/luci/site_access/ page on the Gryphon Tower route
OrtaCVSS 6,1Kavram kanıtıEPSS %2gryphonconnect · gryphon tower firmware9 Ara 2021