EN
Vendor
Engeniustech
41
CVEs
0
On KEV
0
New 30D
Products
EF7.8
Enh1350ext Firmware
Engeniustech
10 CVEs0 on KEV0 new
EF7.2
Ens500-ac Firmware
Engeniustech
9 CVEs0 on KEV0 new
EF7.2
Ens620ext Firmware
Engeniustech
9 CVEs0 on KEV0 new
EF9.8
Ews356-fit Firmware
Engeniustech
2 CVEs0 on KEV0 new
EF6.5
Enh500 Firmware
Engeniustech
1 CVEs0 on KEV0 new
EF8.8
Enstation5-ac Firmware
Engeniustech
1 CVEs0 on KEV0 new
EF9.8
Epg5000 Firmware
Engeniustech
1 CVEs0 on KEV0 new
EF9.8
Esr1200 Firmware
Engeniustech
1 CVEs0 on KEV0 new
EF9.8
Esr1750 Firmware
Engeniustech
1 CVEs0 on KEV0 new
EF9.8
Esr300 Firmware
Engeniustech
1 CVEs0 on KEV0 new
EF9.8
Esr350 Firmware
Engeniustech
1 CVEs0 on KEV0 new
EF9.8
Esr600 Firmware
Engeniustech
1 CVEs0 on KEV0 new
EF9.8
Esr900 Firmware
Engeniustech
1 CVEs0 on KEV0 new
EF8.0
Ews356-fir Firmware
Engeniustech
1 CVEs0 on KEV0 new
EF9.8
Ews660ap Firmware
Engeniustech
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2025-34035 | EF Esr600 Firmware Engeniustech | 9.8 | Jun 24 | EnGenius EnShare IoT Gigabit Cloud Service Command Injection |
| CVE-2025-28371 | EF Enh500 Firmware Engeniustech | 6.5 | May 19 | EnGenius ENH500 AP 2T2R V3.0 FW3.7.22 is vulnerable to Incorrect Access Control via the password change function |
| CVE-2024-31976 | EF Ews356-fir Firmware Engeniustech | 8.0 | Nov 27 | EnGenius EWS356-FIR 1.1.30 and earlier devices allow a remote attacker to execute arbitrary OS commands via the Controller connectivity parameter |
| CVE-2024-11659 | EF Ens500-ac Firmware Engeniustech | 7.2 | Nov 25 | EnGenius ENH1350EXT/ENS500-AC/ENS620EXT diag_iperf command injection |
| CVE-2024-11658 | EF Ens500-ac Firmware Engeniustech | 7.2 | Nov 25 | EnGenius ENH1350EXT/ENS500-AC/ENS620EXT ajax_getChannelList command injection |
| CVE-2024-11657 | EF Ens500-ac Firmware Engeniustech | 7.2 | Nov 25 | EnGenius ENH1350EXT/ENS500-AC/ENS620EXT diag_nslookup command injection |
| CVE-2024-11656 | EF Enh1350ext Firmware Engeniustech | 7.2 | Nov 25 | EnGenius ENH1350EXT/ENS500-AC/ENS620EXT diag_ping6 command injection |
| CVE-2024-11655 | EF Ens500-ac Firmware Engeniustech | 7.2 | Nov 25 | EnGenius ENH1350EXT/ENS500-AC/ENS620EXT diag_pinginterface command injection |
| CVE-2024-11654 | EF Ens500-ac Firmware Engeniustech | 7.2 | Nov 25 | EnGenius ENH1350EXT/ENS500-AC/ENS620EXT diag_traceroute6 command injection |
| CVE-2024-11653 | EF Enh1350ext Firmware Engeniustech | 7.2 | Nov 25 | EnGenius ENH1350EXT/ENS500-AC/ENS620EXT diag_traceroute command injection |
| CVE-2024-11652 | EF Enh1350ext Firmware Engeniustech | 7.2 | Nov 25 | EnGenius ENH1350EXT/ENS500-AC/ENS620EXT sn_https command injection |
| CVE-2024-11651 | EF Ens620ext Firmware Engeniustech | 7.2 | Nov 25 | EnGenius ENH1350EXT/ENS500-AC/ENS620EXT wifi_schedule command injection |
| CVE-2024-36061 | EF Ews356-fit Firmware Engeniustech | 9.8 | Nov 11 | EnGenius EWS356-FIT devices through 1.1.30 allow blind OS command injection |
| CVE-2024-31975 | EF Ews356-fit Firmware Engeniustech | 4.8 | Oct 30 | EnGenius EWS356-Fit devices through 1.1.30 allow a remote attacker to conduct stored XSS attacks via the Wi-Fi SSID parameters |
| CVE-2024-36060 | EF Enstation5-ac Firmware Engeniustech | 8.8 | Oct 30 | EnGenius EnStation5-AC A8J-ENS500AC 1.0.0 devices allow blind OS command injection via shell metacharacters in the Ping and Speed Test parameters |
| CVE-2024-45242 | EF Enh1350ext Firmware Engeniustech | 7.8 | Oct 24 | EnGenius ENH1350EXT A8J-ENH1350EXT devices through 3.9.3.2_c1.9.51 allow (blind) OS Command Injection via shell metacharacters to the Ping or Speed Test utility |
| CVE-2019-11353 | EF Ews660ap Firmware Engeniustech | 9.8 | May 9 | The EnGenius EWS660AP router with firmware 2.0.284 allows an attacker to execute arbitrary commands using the built-in ping and traceroute utilities by using different payloads… |
