R1
Product
Rex 100 Firmware
5
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 3Medium 0Low 0
Watch
Add Rex 100 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-45273 | 7.8 | Oct 15 | An unauthenticated local attacker can decrypt the devices config file and therefore compromise the device due to a weak implementation of the encryption used Affected: before 2.3.1 |
| CVE-2024-45271 | 7.8 | Oct 15 | An unauthenticated local attacker can gain admin privileges by deploying a config file due to improper input validation Affected: before 2.3.1 |
| CVE-2024-45276 | 7.5 | Oct 15 | An unauthenticated remote attacker can get read access to files in the "/tmp" directory due to missing authentication Affected: before 2.3.1 |
Showing 3