RSS   Podatności dla 'Group controller firmware'   RSS

2018-09-07
 
CVE-2018-15486

CWE-829
 

 
An issue was discovered on KONE Group Controller (KGC) devices before 4.6.5. Unauthenticated Local File Inclusion and File modification is possible through the open HTTP interface by modifying the name parameter of the file endpoint, aka KONE-02.

 
 
CVE-2018-15485

CWE-287
 

 
An issue was discovered on KONE Group Controller (KGC) devices before 4.6.5. FTP does not require authentication or authorization, aka KONE-03.

 
 
CVE-2018-15484

CWE-78
 

 
An issue was discovered on KONE Group Controller (KGC) devices before 4.6.5. Unauthenticated Remote Code Execution is possible through the open HTTP interface by modifying autoexec.bat, aka KONE-01.

 
 
CVE-2018-15483

CWE-20
 

 
An issue was discovered on KONE Group Controller (KGC) devices before 4.6.5. Denial of Service can occur through the open HTTP interface, aka KONE-04.

 


Copyright 2024, cxsecurity.com

 

Back to Top