hidglobal kayıtları

hidglobal üreticisine ait 17 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren: 0 · %0
Silahlaştırılmış: 0 · %0
Pre-auth RCE: 2
Düzeltme kaydı olan: %0
Yayından KEV’e ortanca: KEV’e giren kayıt yok

Yıllara göre kayıt

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

Saldırı profili

Tüm kayıtlar

17 kayıt

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
40Planlayın	CVE-2022-31479İstismar yok	Remote Code Execution via command injection of the hostnamehidglobal · lp1501 firmware · CWE-693 pre-auth RCE Komut enjeksiyonu	Kritik9,8	—	%2,4	6 Haz 2022
40Planlayın	CVE-2022-31481İstismar yok	Remote Code Execution via buffer overflow in firmware update processhidglobal · lp1501 firmware · CWE-120 pre-auth RCE Bellek hatası	Kritik10,0	—	%1,6	6 Haz 2022
36İzleyin	CVE-2022-31483İstismar yok	Arbitrary file write via authenticated OSDP file uploadhidglobal · lp1501 firmware · CWE-22 Yol geçişi	Yüksek8,8	—	%1,8	6 Haz 2022
35İzleyin	CVE-2022-31486İstismar yok	Command injection via Advanced Networking route add functionalityhidglobal · lp1501 firmware · CWE-78 RCE Komut enjeksiyonu	Yüksek8,8	—	%1,4	6 Haz 2022
35İzleyin	CVE-2020-36283İstismar yok	HID OMNIKEY 5427 and OMNIKEY 5127 readers are vulnerable to CSRF when using the EEM driver (Ethernet Emulation Mode).hidglobal · omnikey 5427 firmware · CWE-352 Kimlik doğrulamasız XSS CSRF	Yüksek8,8	—	%0,8	24 Mar 2021
31İzleyin	CVE-2018-17491İstismar yok	EasyLobby Solo could allow a local attacker to gain elevated privileges on the system.hidglobal · easylobby solo · CWE-862 Yerel yetki yükseltme Erişim denetimi (IDOR)	Yüksek7,8	—	%0,3	21 Mar 2019
31İzleyin	CVE-2018-17492İstismar yok	EasyLobby Solo contains default administrative credentials.hidglobal · easylobby solo · CWE-798 Gömülü kimlik bilgisi	Yüksek7,8	—	%0,3	21 Mar 2019
31İzleyin	CVE-2024-22388İstismar yok	Insecure Default Initialization of Resource in HID Globalhidglobal · iclass se cp1000 encoder firmware · CWE-1188	Yüksek7,8	—	%0,2	6 Şub 2024
30İzleyin	CVE-2022-31484İstismar yok	User Account Deletion Unauthenticatedhidglobal · lp1501 firmware · CWE-425 Kimlik doğrulamasız Hizmet dışı bırakma	Yüksek7,5	—	%1,0	6 Haz 2022
30İzleyin	CVE-2022-31482İstismar yok	Denial-of-Service via internal structure overflowhidglobal · lp1501 firmware · CWE-120 Kimlik doğrulamasız Bellek hatası Hizmet dışı bırakma	Yüksek7,5	—	%1,0	6 Haz 2022
30İzleyin	CVE-2022-31480İstismar yok	Unauthenticated Firmware Upload and Arbitrary Reboothidglobal · lp1501 firmware · CWE-425 Kimlik doğrulamasız Hizmet dışı bırakma	Yüksek7,5	—	%1,0	6 Haz 2022
29İzleyin	CVE-2023-2904İstismar yok	The External Visitor Manager portal of HID’s SAFE versions 5.8.0 through 5.11.3 are vulnerable to manipulation within web fields in the applhidglobal · safe · CWE-471	Yüksek7,3	—	%0,6	7 Haz 2023
28İzleyin	CVE-2018-17490İstismar yok	EasyLobby Solo is vulnerable to a denial of service.hidglobal · easylobby solo · CWE-862 Erişim denetimi (IDOR)	Yüksek7,1	—	%0,3	21 Mar 2019
23İzleyin	CVE-2019-13603İstismar yok	An issue was discovered in the HID Global DigitalPersona (formerly Crossmatch) U.are.U 4500 Fingerprint Reader Windows Biometric Framework dhidglobal · digital persona u.are.u 4500 driver firmware · CWE-330 Kimlik doğrulamasız Zayıf kripto	Orta5,9	—	%1,1	16 Tem 2019
22İzleyin	CVE-2018-17489İstismar yok	EasyLobby Solo could allow a local attacker to obtain sensitive information, caused by the storing of the social security number in plaintexhidglobal · easylobby solo · CWE-312	Orta5,5	—	%0,2	21 Mar 2019
21İzleyin	CVE-2022-31485İstismar yok	Unauthenticated homepage note modificationhidglobal · lp1501 firmware · CWE-425 Kimlik doğrulamasız	Orta5,3	—	%0,8	6 Haz 2022
21İzleyin	CVE-2024-23806İstismar yok	HID Global Reader Configuration Cards Improper Authorizationhidglobal · omnikey secure elements reader configuration cards firmware · CWE-285 Erişim denetimi (IDOR)	Orta5,3	—	%0,3	7 Şub 2024

CVE-2022-31479
40Planlayın
Remote Code Execution via command injection of the hostname
KritikCVSS 9,8İstismar yokEPSS %2
- pre-auth RCE
- Komut enjeksiyonu
hidglobal · lp1501 firmware6 Haz 2022
CVE-2022-31481
40Planlayın
Remote Code Execution via buffer overflow in firmware update process
KritikCVSS 10,0İstismar yokEPSS %2
- pre-auth RCE
- Bellek hatası
hidglobal · lp1501 firmware6 Haz 2022
CVE-2022-31483
36İzleyin
Arbitrary file write via authenticated OSDP file upload
YüksekCVSS 8,8İstismar yokEPSS %2
- Yol geçişi
hidglobal · lp1501 firmware6 Haz 2022
CVE-2022-31486
35İzleyin
Command injection via Advanced Networking route add functionality
YüksekCVSS 8,8İstismar yokEPSS %1
- RCE
- Komut enjeksiyonu
hidglobal · lp1501 firmware6 Haz 2022
CVE-2020-36283
35İzleyin
HID OMNIKEY 5427 and OMNIKEY 5127 readers are vulnerable to CSRF when using the EEM driver (Ethernet Emulation Mode).
YüksekCVSS 8,8İstismar yokEPSS %1
hidglobal · omnikey 5427 firmware24 Mar 2021
CVE-2018-17491
31İzleyin
EasyLobby Solo could allow a local attacker to gain elevated privileges on the system.
YüksekCVSS 7,8İstismar yokEPSS %0
- Yerel yetki yükseltme
- Erişim denetimi (IDOR)
hidglobal · easylobby solo21 Mar 2019
CVE-2018-17492
31İzleyin
EasyLobby Solo contains default administrative credentials.
YüksekCVSS 7,8İstismar yokEPSS %0
- Gömülü kimlik bilgisi
hidglobal · easylobby solo21 Mar 2019
CVE-2024-22388
31İzleyin
Insecure Default Initialization of Resource in HID Global
YüksekCVSS 7,8İstismar yokEPSS %0
hidglobal · iclass se cp1000 encoder firmware6 Şub 2024
CVE-2022-31484
30İzleyin
User Account Deletion Unauthenticated
YüksekCVSS 7,5İstismar yokEPSS %1
- Kimlik doğrulamasız
- Hizmet dışı bırakma
hidglobal · lp1501 firmware6 Haz 2022
CVE-2022-31482
30İzleyin
Denial-of-Service via internal structure overflow
YüksekCVSS 7,5İstismar yokEPSS %1
hidglobal · lp1501 firmware6 Haz 2022
CVE-2022-31480
30İzleyin
Unauthenticated Firmware Upload and Arbitrary Reboot
YüksekCVSS 7,5İstismar yokEPSS %1
- Kimlik doğrulamasız
- Hizmet dışı bırakma
hidglobal · lp1501 firmware6 Haz 2022
CVE-2023-2904
29İzleyin
The External Visitor Manager portal of HID’s SAFE versions 5.8.0 through 5.11.3 are vulnerable to manipulation within web fields in the appl
YüksekCVSS 7,3İstismar yokEPSS %1
hidglobal · safe7 Haz 2023
CVE-2018-17490
28İzleyin
EasyLobby Solo is vulnerable to a denial of service.
YüksekCVSS 7,1İstismar yokEPSS %0
- Erişim denetimi (IDOR)
hidglobal · easylobby solo21 Mar 2019
CVE-2019-13603
23İzleyin
An issue was discovered in the HID Global DigitalPersona (formerly Crossmatch) U.are.U 4500 Fingerprint Reader Windows Biometric Framework d
OrtaCVSS 5,9İstismar yokEPSS %1
- Kimlik doğrulamasız
- Zayıf kripto
hidglobal · digital persona u.are.u 4500 driver firmware16 Tem 2019
CVE-2018-17489
22İzleyin
EasyLobby Solo could allow a local attacker to obtain sensitive information, caused by the storing of the social security number in plaintex
OrtaCVSS 5,5İstismar yokEPSS %0
hidglobal · easylobby solo21 Mar 2019
CVE-2022-31485
21İzleyin
Unauthenticated homepage note modification
OrtaCVSS 5,3İstismar yokEPSS %1
- Kimlik doğrulamasız
hidglobal · lp1501 firmware6 Haz 2022
CVE-2024-23806
21İzleyin
HID Global Reader Configuration Cards Improper Authorization
OrtaCVSS 5,3İstismar yokEPSS %0
- Erişim denetimi (IDOR)
hidglobal · omnikey secure elements reader configuration cards firmware7 Şub 2024