Vonets kayıtları
vonets üreticisine ait 11 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 2
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')2
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2
- CWE-284 Improper Access Control1
- CWE-425 Direct Request ('Forced Browsing')1
- CWE-703 Improper Check or Handling of Exceptional Conditions1
- CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
11 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
40Planlayın | CVE-2024-39791İstismar yok | Vonets WiFi Bridges Stack-based Buffer Overflowvonets · var1200-h firmware · CWE-121 | Kritik10,0 | — | %1,1 | 12 Ağu 2024 |
37İzleyin | CVE-2024-37023İstismar yok | Vonets WiFi Bridges Command Injectionvonets · var1200-h firmware · CWE-77 | Kritik9,4 | — | %1,3 | 12 Ağu 2024 |
37İzleyin | CVE-2024-39815İstismar yok | Vonets WiFi Bridges Improper Check or Handling of Exceptional Conditionsvonets · var1200-h firmware · CWE-703 | Kritik9,4 | — | %0,8 | 12 Ağu 2024 |
35İzleyin | CVE-2024-41936İstismar yok | Vonets WiFi Bridges Path Traversalvonets · var1200-h firmware · CWE-22 | Yüksek8,7 | — | %1,7 | 12 Ağu 2024 |
35İzleyin | CVE-2024-29082İstismar yok | Vonets WiFi Bridges Improper Access Controlvonets · var1200-h firmware · CWE-284 | Yüksek8,8 | — | %0,8 | 12 Ağu 2024 |
34İzleyin | CVE-2024-41161İstismar yok | Vonets WiFi Bridges Use of Hard-coded Credentialsvonets · var1200-h firmware · CWE-798 | Yüksek8,7 | — | %0,6 | 8 Ağu 2024 |
32İzleyin | CVE-2024-46329İstismar yok | VONETS VAP11G-300 v3.3.23.6.9 was discovered to contain a command injection vulnerability via the SystemCommand object.vonets · vap11g-300 firmware · CWE-78 | Yüksek8,0 | — | %0,8 | 26 Eyl 2024 |
32İzleyin | CVE-2024-46328İstismar yok | VONETS VAP11G-300 v3.3.23.6.9 was discovered to contain hardcoded credentials for several different privileged accounts, including root.vonets · vap11g-300 firmware · CWE-259 | Yüksek8,0 | — | %0,2 | 26 Eyl 2024 |
29İzleyin | CVE-2024-46330İstismar yok | VONETS VAP11G-300 v3.3.23.6.9 was discovered to contain a command injection vulnerability via the iptablesWebsFilterRun object.vonets · vap11g-300 firmware · CWE-78 | Yüksek7,4 | — | %0,8 | 26 Eyl 2024 |
24İzleyin | CVE-2024-42001İstismar yok | Vonets WiFi Bridges Forced Browsingvonets · var1200-h firmware · CWE-425 | Orta6,1 | — | %0,7 | 12 Ağu 2024 |
22İzleyin | CVE-2024-46327İstismar yok | An issue in the Http_handle object of VONETS VAP11G-300 v3.3.23.6.9 allows attackers to access sensitive files via a directory traversal.vonets · vap11g-300 firmware · CWE-22 | Orta5,7 | — | %0,4 | 26 Eyl 2024 |
- CVE-2024-3979140Planlayın
Vonets WiFi Bridges Stack-based Buffer Overflow
KritikCVSS 10,0İstismar yokEPSS %1vonets · var1200-h firmware12 Ağu 2024
- CVE-2024-3702337İzleyin
Vonets WiFi Bridges Command Injection
KritikCVSS 9,4İstismar yokEPSS %1vonets · var1200-h firmware12 Ağu 2024
- CVE-2024-3981537İzleyin
Vonets WiFi Bridges Improper Check or Handling of Exceptional Conditions
KritikCVSS 9,4İstismar yokEPSS %1vonets · var1200-h firmware12 Ağu 2024
- CVE-2024-4193635İzleyin
Vonets WiFi Bridges Path Traversal
YüksekCVSS 8,7İstismar yokEPSS %2vonets · var1200-h firmware12 Ağu 2024
- CVE-2024-2908235İzleyin
Vonets WiFi Bridges Improper Access Control
YüksekCVSS 8,8İstismar yokEPSS %1vonets · var1200-h firmware12 Ağu 2024
- CVE-2024-4116134İzleyin
Vonets WiFi Bridges Use of Hard-coded Credentials
YüksekCVSS 8,7İstismar yokEPSS %1vonets · var1200-h firmware8 Ağu 2024
- CVE-2024-4632932İzleyin
VONETS VAP11G-300 v3.3.23.6.9 was discovered to contain a command injection vulnerability via the SystemCommand object.
YüksekCVSS 8,0İstismar yokEPSS %1vonets · vap11g-300 firmware26 Eyl 2024
- CVE-2024-4632832İzleyin
VONETS VAP11G-300 v3.3.23.6.9 was discovered to contain hardcoded credentials for several different privileged accounts, including root.
YüksekCVSS 8,0İstismar yokEPSS %0vonets · vap11g-300 firmware26 Eyl 2024
- CVE-2024-4633029İzleyin
VONETS VAP11G-300 v3.3.23.6.9 was discovered to contain a command injection vulnerability via the iptablesWebsFilterRun object.
YüksekCVSS 7,4İstismar yokEPSS %1vonets · vap11g-300 firmware26 Eyl 2024
- CVE-2024-4200124İzleyin
Vonets WiFi Bridges Forced Browsing
OrtaCVSS 6,1İstismar yokEPSS %1vonets · var1200-h firmware12 Ağu 2024
- CVE-2024-4632722İzleyin
An issue in the Http_handle object of VONETS VAP11G-300 v3.3.23.6.9 allows attackers to access sensitive files via a directory traversal.
OrtaCVSS 5,7İstismar yokEPSS %0vonets · vap11g-300 firmware26 Eyl 2024