proges kayıtları

proges üreticisine ait 7 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren: 0 · %0
Silahlaştırılmış: 0 · %0
Pre-auth RCE: 0
Düzeltme kaydı olan: %0
Yayından KEV’e ortanca: KEV’e giren kayıt yok

Yıllara göre kayıt

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

Saldırı profili

Tüm kayıtlar

7 kayıt

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
33İzleyin	CVE-2024-3083İstismar yok	A “CWE-352: Cross-Site Request Forgery (CSRF)” can be exploited by remote attackers to perform state-changing operations with administrativeproges · sensor net connect firmware v2 · CWE-352 Kimlik doğrulamasız CSRF	Yüksek8,3	—	%0,2	31 Tem 2024
31İzleyin	CVE-2024-31202İstismar yok	A “CWE-732: Incorrect Permission Assignment for Critical Resource” in the ThermoscanIP installation folder allows a local attacker to perforproges · thermoscan ip · CWE-732 Yerel yetki yükseltme	Yüksek7,8	—	%0,2	31 Tem 2024
26İzleyin	CVE-2024-31201İstismar yok	A “CWE-428: Unquoted Search Path or Element” affects the ThermoscanIP_Scrutation service.proges · thermoscan ip · CWE-428 Yerel yetki yükseltme	Orta6,7	—	%0,2	31 Tem 2024
24İzleyin	CVE-2024-31199İstismar yok	A “CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')” allows malicious users to permanently injecproges · sensor net connect firmware v2 · CWE-79 Kimlik doğrulamasız XSS	Orta6,1	—	%0,3	31 Tem 2024
22İzleyin	CVE-2024-31203İstismar yok	A “CWE-121: Stack-based Buffer Overflow” in the wd210std.dll dynamic library packaged with the ThermoscanIP installer allows a local attackeproges · thermoscan ip · CWE-121 Bellek hatası Hizmet dışı bırakma	Orta5,5	—	%0,1	31 Tem 2024
18İzleyin	CVE-2024-31200İstismar yok	A “CWE-201: Insertion of Sensitive Information Into Sent Data” affecting the administrative account allows an attacker with physical access proges · sensor net connect firmware v2 · CWE-201	Orta4,6	—	%0,2	31 Tem 2024
18İzleyin	CVE-2024-3082İstismar yok	A “CWE-256: Plaintext Storage of a Password” affecting the administrative account allows an attacker with physical access to the machine to proges · sensor net connect firmware v2 · CWE-256	Orta4,6	—	%0,1	31 Tem 2024

CVE-2024-3083
33İzleyin
A “CWE-352: Cross-Site Request Forgery (CSRF)” can be exploited by remote attackers to perform state-changing operations with administrative
YüksekCVSS 8,3İstismar yokEPSS %0
- Kimlik doğrulamasız
- CSRF
proges · sensor net connect firmware v231 Tem 2024
CVE-2024-31202
31İzleyin
A “CWE-732: Incorrect Permission Assignment for Critical Resource” in the ThermoscanIP installation folder allows a local attacker to perfor
YüksekCVSS 7,8İstismar yokEPSS %0
- Yerel yetki yükseltme
proges · thermoscan ip31 Tem 2024
CVE-2024-31201
26İzleyin
A “CWE-428: Unquoted Search Path or Element” affects the ThermoscanIP_Scrutation service.
OrtaCVSS 6,7İstismar yokEPSS %0
- Yerel yetki yükseltme
proges · thermoscan ip31 Tem 2024
CVE-2024-31199
24İzleyin
A “CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')” allows malicious users to permanently injec
OrtaCVSS 6,1İstismar yokEPSS %0
- Kimlik doğrulamasız
- XSS
proges · sensor net connect firmware v231 Tem 2024
CVE-2024-31203
22İzleyin
A “CWE-121: Stack-based Buffer Overflow” in the wd210std.dll dynamic library packaged with the ThermoscanIP installer allows a local attacke
OrtaCVSS 5,5İstismar yokEPSS %0
- Bellek hatası
- Hizmet dışı bırakma
proges · thermoscan ip31 Tem 2024
CVE-2024-31200
18İzleyin
A “CWE-201: Insertion of Sensitive Information Into Sent Data” affecting the administrative account allows an attacker with physical access
OrtaCVSS 4,6İstismar yokEPSS %0
proges · sensor net connect firmware v231 Tem 2024
CVE-2024-3082
18İzleyin
A “CWE-256: Plaintext Storage of a Password” affecting the administrative account allows an attacker with physical access to the machine to
OrtaCVSS 4,6İstismar yokEPSS %0
proges · sensor net connect firmware v231 Tem 2024