riello-ups kayıtları
riello-ups üreticisine ait 10 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 2
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')2
- CWE-25 Path Traversal: '/../filedir'1
- CWE-255 Credentials Management Errors1
- CWE-352 Cross-Site Request Forgery (CSRF)1
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
- CWE-640 Weak Password Recovery Mechanism for Forgotten Password1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
10 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
50Planlayın | CVE-2024-8877Kavram kanıtı | Improper neutralization of special elements results in a SQL Injection vulnerability in Riello Netman 204.riello-ups · netman 204 firmware · CWE-89 | Orta6,9 | — | %77,2 | 24 Eyl 2024 |
40Planlayın | CVE-2017-6900İstismar yok | An issue was discovered in Riello NetMan 204 14-2 and 15-2.riello-ups · netman 204 firmware · CWE-255 | Kritik9,8 | — | %2,6 | 3 Tem 2019 |
40Planlayın | CVE-2024-8878İstismar yok | Unauthenticated Password Resetriello-ups · netman 204 firmware · CWE-640 | Kritik10,0 | — | %1,2 | 24 Eyl 2024 |
39İzleyin | CVE-2022-47893İstismar yok | NetMan 204 Remote Code Executionriello-ups · netman 204 firmware · CWE-434 | Kritik9,8 | — | %1,1 | 3 Eki 2023 |
35İzleyin | CVE-2022-47891İstismar yok | Admin password reset in NetMan 204riello-ups · netman 204 firmware · CWE-798 | Yüksek8,8 | — | %0,6 | 3 Eki 2023 |
35İzleyin | CVE-2022-3372İstismar yok | Cross-Site Request Forgery (CSRF) in Riello UPS Netman-204riello-ups · netman 204 firmware · CWE-352 | Yüksek8,8 | — | %0,3 | 21 Haz 2023 |
30İzleyin | CVE-2022-47892İstismar yok | Information disclosure in NetMan 204riello-ups · netman 204 firmware · CWE-200 | Yüksek7,5 | — | %0,4 | 3 Eki 2023 |
29İzleyin | CVE-2025-68916İstismar yok | Riello UPS NetMan 208 Application before 1.12 allows cgi-bin/certsupload.cgi /../ directory traversal for file upload with resultant code exriello-ups · netman 208 · CWE-25 | Yüksek7,2 | — | %2,6 | 24 Ara 2025 |
21İzleyin | CVE-2025-68914İstismar yok | Riello UPS NetMan 208 Application before 1.12 allows cgi-bin/login.cgi username SQL Injection.riello-ups · netman 208 · CWE-89 | Orta5,3 | — | %0,2 | 24 Ara 2025 |
19İzleyin | CVE-2025-68915İstismar yok | Riello UPS NetMan 208 Application before 1.12 allows cgi-bin/loginbanner_w.cgi XSS via a crafted banner.riello-ups · netman 208 · CWE-79 | Orta4,8 | — | %0,2 | 24 Ara 2025 |
- CVE-2024-887750Planlayın
Improper neutralization of special elements results in a SQL Injection vulnerability in Riello Netman 204.
OrtaCVSS 6,9Kavram kanıtıEPSS %77riello-ups · netman 204 firmware24 Eyl 2024
- CVE-2017-690040Planlayın
An issue was discovered in Riello NetMan 204 14-2 and 15-2.
KritikCVSS 9,8İstismar yokEPSS %2riello-ups · netman 204 firmware3 Tem 2019
- CVE-2024-887840Planlayın
Unauthenticated Password Reset
KritikCVSS 10,0İstismar yokEPSS %1riello-ups · netman 204 firmware24 Eyl 2024
- CVE-2022-4789339İzleyin
NetMan 204 Remote Code Execution
KritikCVSS 9,8İstismar yokEPSS %1riello-ups · netman 204 firmware3 Eki 2023
- CVE-2022-4789135İzleyin
Admin password reset in NetMan 204
YüksekCVSS 8,8İstismar yokEPSS %0riello-ups · netman 204 firmware3 Eki 2023
- CVE-2022-337235İzleyin
Cross-Site Request Forgery (CSRF) in Riello UPS Netman-204
YüksekCVSS 8,8İstismar yokEPSS %0riello-ups · netman 204 firmware21 Haz 2023
- CVE-2022-4789230İzleyin
Information disclosure in NetMan 204
YüksekCVSS 7,5İstismar yokEPSS %0riello-ups · netman 204 firmware3 Eki 2023
- CVE-2025-6891629İzleyin
Riello UPS NetMan 208 Application before 1.12 allows cgi-bin/certsupload.cgi /../ directory traversal for file upload with resultant code ex
YüksekCVSS 7,2İstismar yokEPSS %2riello-ups · netman 20824 Ara 2025
- CVE-2025-6891421İzleyin
Riello UPS NetMan 208 Application before 1.12 allows cgi-bin/login.cgi username SQL Injection.
OrtaCVSS 5,3İstismar yokEPSS %0riello-ups · netman 20824 Ara 2025
- CVE-2025-6891519İzleyin
Riello UPS NetMan 208 Application before 1.12 allows cgi-bin/loginbanner_w.cgi XSS via a crafted banner.
OrtaCVSS 4,8İstismar yokEPSS %0riello-ups · netman 20824 Ara 2025