UF
Product
Uvd Firmware
5
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 2Medium 1Low 0
Watch
Add Uvd Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-10276 | 9.8 | Jun 24 | The password for the safety PLC is the default and thus easy to find (in manuals, etc.) Affected: All versions, or not specified |
| CVE-2020-10275 | 9.8 | Jun 24 | The access tokens for the REST API are directly derived from the publicly available default credentials for the web interface Affected: All versions, or not specified |
| CVE-2020-10280 | 7.5 | Jun 24 | The Apache server on port 80 that host the web interface is vulnerable to a DoS by spamming incomplete HTTP headers, effectively blocking the access to the dashboard Affected: All versions, or not specified |
| CVE-2020-10274 | 7.1 | Jun 24 | The access tokens for the REST API are directly derived (sha256 and base64 encoding) from the publicly available default credentials from the Control Dashboard (refer to… Affected: All versions, or not specified |
| CVE-2020-10277 | 6.4 | Jun 24 | There is no mechanism in place to prevent a bad operator to boot from a live OS image, this can lead to extraction of sensible files (such as the shadow file) or privilege… Affected: All versions, or not specified |
Showing 5