Vulnerability index

Browse CVEs

13 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Iac Ast2500 Firmware HIGH 7.4
CVE-2021-4228EPSS 10%

Use of hard-coded TLS certificate by default allows an attacker to perform Man-in-the-Middle (MitM) attacks even in the presence of the HTTPS connect…

Mitigation only
Fix from $1,950 2022-10-24
Iac Ast2500a Firmware HIGH 8.8
CVE-2021-46279

Session fixation and insufficient session expiration vulnerabilities allow an attacker to perfom session hijacking attacks against users. This issue …

Mitigation only
Fix from $1,950 2022-10-24
Iac Ast2500a Firmware HIGH 7.5
CVE-2021-44467

A broken access control vulnerability in the KillDupUsr_func function of spx_restservice allows an attacker to arbitrarily terminate active sessions …

Mitigation only
Fix from $1,950 2022-10-24
Iac Ast2500a Firmware MEDIUM 6.5
CVE-2021-44769

An improper input validation vulnerability in the TLS certificate generation function allows an attacker to cause a Denial-of-Service (DoS) condition…

Mitigation only
Fix from $1,600 2022-10-24
Iac Ast2500a Firmware MEDIUM 5.3
CVE-2021-44776

A broken access control vulnerability in the SubNet_handler_func function of spx_restservice allows an attacker to arbitrarily change the security ac…

Mitigation only
Fix from $1,600 2022-10-24
Iac Ast2500a Firmware MEDIUM 5.3
CVE-2021-45925

Observable discrepancies in the login process allow an attacker to guess legitimate user names registered in the BMC. This issue affects: Lanner Inc …

Mitigation only
Fix from $1,600 2022-10-24
Iac Ast2500a Firmware CRITICAL 9.8
CVE-2021-26727

Multiple command injections and stack-based buffer overflows vulnerabilities in the SubNet_handler_func function of spx_restservice allow an attacker…

Mitigation only
Fix from $2,300 2022-10-24
Iac Ast2500a Firmware CRITICAL 9.8
CVE-2021-26728

Command injection and stack-based buffer overflow vulnerabilities in the KillDupUsr_func function of spx_restservice allow an attacker to execute arb…

Mitigation only
Fix from $2,300 2022-10-24
Iac Ast2500a Firmware CRITICAL 9.8
CVE-2021-26729

Command injection and multiple stack-based buffer overflows vulnerabilities in the Login_handler_func function of spx_restservice allow an attacker t…

Mitigation only
Fix from $2,300 2022-10-24
Iac Ast2500a Firmware CRITICAL 9.8
CVE-2021-26730

A stack-based buffer overflow vulnerability in a subfunction of the Login_handler_func function of spx_restservice allows an attacker to execute arbi…

Mitigation only
Fix from $2,300 2022-10-24
Iac Ast2500a Firmware CRITICAL 9.8
CVE-2021-26731

Command injection and multiple stack-based buffer overflows vulnerabilities in the modifyUserb_func function of spx_restservice allow an authenticate…

Mitigation only
Fix from $2,300 2022-10-24
Iac Ast2500a Firmware HIGH 7.5
CVE-2021-26733

A broken access control vulnerability in the FirstReset_handler_func function of spx_restservice allows an attacker to arbitrarily send reboot comman…

Mitigation only
Fix from $1,950 2022-10-24
Iac Ast2500a Firmware MEDIUM 5.3
CVE-2021-26732

A broken access control vulnerability in the First_network_func function of spx_restservice allows an attacker to arbitrarily change the network conf…

Mitigation only
Fix from $1,600 2022-10-24