OR
Vendor
Oringnet
8
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2024-55548 | IF Iap-420 Firmware Oringnet | 7.5 | Dec 10 | Improper check of password character lenght in ORing IAP-420 allows a forced deadlock. This issue affects IAP-420: through 2.01e |
| CVE-2024-55547 | IF Iap-420 Firmware Oringnet | 9.8 | Dec 10 | SNMP objects in NET-SNMP used in ORing IAP-420 allows Command Injection. This issue affects IAP-420: through 2.01e |
| CVE-2024-55546 | IF Iap-420 Firmware Oringnet | 5.4 | Dec 10 | Missing input validation in the ORing IAP-420 web-interface allows stored Cross-Site Scripting (XSS).This issue affects IAP-420 version 2.01e and below |
| CVE-2024-55545 | IF Iap-420 Firmware Oringnet | 6.1 | Dec 10 | Missing input validation in the ORing IAP-420 web-interface allows Cross-Site Scripting (XSS).This issue affects IAP-420 version 2.01e and below |
| CVE-2024-55544 | IF Iap-420 Firmware Oringnet | 8.8 | Dec 10 | Missing input validation in the ORing IAP-420 web-interface allows authenticated Command Injections on OS level.This issue affects IAP-420 version 2.01e and below |
| CVE-2024-5411 | IF Iap-420 Firmware Oringnet | 8.8 | May 28 | Missing input validation and OS command integration of the input in the ORing IAP-420 web-interface allows authenticated command injection.This issue affects IAP-420 version 2.01e… |
| CVE-2024-5410 | IF Iap-420 Firmware Oringnet | 5.4 | May 28 | Missing input validation in the ORing IAP-420 web-interface allows stored Cross-Site Scripting (XSS).This issue affects IAP-420 version 2.01e and below |
| CVE-2022-3203 | IF Iap-420+ Firmware Oringnet | 9.8 | Oct 21 | ORing net IAP-420(+) Hidden Functionality |
