Skip to main content

Amegaview

5 CVEs product

Monthly

CVE-2021-27453 CRITICAL Act Now

Mesa Labs AmegaView Versions 3.0 uses default cookies that could be set to bypass authentication to the web application, which may allow an attacker to gain access. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Amegaview
NVD
CVSS 3.1
9.8
EPSS
1.0%
CVE-2021-27451 CRITICAL Act Now

Mesa Labs AmegaView Versions 3.0 and prior’s passcode is generated by an easily reversible algorithm, which may allow an attacker to gain access to the device. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Amegaview
NVD
CVSS 3.1
9.8
EPSS
0.8%
CVE-2021-27449 HIGH This Week

Mesa Labs AmegaView Versions 3.0 and prior has a command injection vulnerability that can be exploited to execute commands in the web server. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Command Injection Amegaview
NVD
CVSS 3.1
8.8
EPSS
3.1%
CVE-2021-27447 CRITICAL Act Now

Mesa Labs AmegaView version 3.0 is vulnerable to a command injection, which may allow an attacker to remotely execute arbitrary code. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Command Injection Amegaview
NVD
CVSS 3.1
9.8
EPSS
2.3%
CVE-2021-27445 HIGH This Week

Mesa Labs AmegaView Versions 3.0 and prior has insecure file permissions that could be exploited to escalate privileges on the device. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Amegaview
NVD
CVSS 3.1
7.8
EPSS
0.2%
EPSS 1% CVSS 9.8
CRITICAL Act Now

Mesa Labs AmegaView Versions 3.0 uses default cookies that could be set to bypass authentication to the web application, which may allow an attacker to gain access. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Amegaview
NVD
EPSS 1% CVSS 9.8
CRITICAL Act Now

Mesa Labs AmegaView Versions 3.0 and prior’s passcode is generated by an easily reversible algorithm, which may allow an attacker to gain access to the device. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Amegaview
NVD
EPSS 3% CVSS 8.8
HIGH This Week

Mesa Labs AmegaView Versions 3.0 and prior has a command injection vulnerability that can be exploited to execute commands in the web server. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Command Injection Amegaview
NVD
EPSS 2% CVSS 9.8
CRITICAL Act Now

Mesa Labs AmegaView version 3.0 is vulnerable to a command injection, which may allow an attacker to remotely execute arbitrary code. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Command Injection Amegaview
NVD
EPSS 0% CVSS 7.8
HIGH This Week

Mesa Labs AmegaView Versions 3.0 and prior has insecure file permissions that could be exploited to escalate privileges on the device. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Amegaview
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy