Skip to main content

Flexair

10 CVEs product

Monthly

CVE-2019-7670 Jul 01, 19:15 HIGH POC THREAT This Week

Prima Systems FlexAir, Versions 2.3.38 and prior. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Command Injection Flexair Primasystems
NVD Exploit-DB
CVSS 3.1
7.2
EPSS
18.3%
CVE-2019-7669 Jul 01, 19:15 HIGH POC THREAT This Week

Prima Systems FlexAir, Versions 2.3.38 and prior. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

File Upload Flexair Primasystems
NVD
CVSS 3.1
8.8
EPSS
31.4%
CVE-2019-7668 Jul 01, 19:15 CRITICAL Act Now

Prima Systems FlexAir devices have Default Credentials. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Flexair Primasystems
NVD
CVSS 3.0
9.8
EPSS
1.6%
CVE-2019-7667 Jul 01, 19:15 CRITICAL POC Act Now

Prima Systems FlexAir, Versions 2.3.38 and prior. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Flexair Primasystems
NVD
CVSS 3.1
9.8
EPSS
4.5%
CVE-2019-7666 Jul 01, 19:15 HIGH POC THREAT This Week

Prima Systems FlexAir, Versions 2.3.38 and prior. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Authentication Bypass Flexair Primasystems
NVD Exploit-DB
CVSS 3.1
8.8
EPSS
14.8%
CVE-2019-7281 Jul 01, 19:15 HIGH This Week

Prima Systems FlexAir, Versions 2.3.38 and prior. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

CSRF Flexair Primasystems
NVD
CVSS 3.1
8.8
EPSS
0.9%
CVE-2019-7280 Jul 01, 19:15 HIGH This Week

Prima Systems FlexAir, Versions 2.3.38 and prior. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Authentication Bypass Flexair Primasystems
NVD
CVSS 3.1
8.8
EPSS
2.4%
CVE-2019-7672 Jun 05, 19:29 HIGH POC This Week

Prima Systems FlexAir, Versions 2.3.38 and prior. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Authentication Bypass Flexair Primasystems
NVD
CVSS 3.1
8.8
EPSS
2.4%
CVE-2019-7671 Jun 05, 19:29 CRITICAL POC Act Now

Prima Systems FlexAir, Versions 2.3.38 and prior. Rated critical severity (CVSS 9.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

XSS RCE Flexair Primasystems
NVD Exploit-DB
CVSS 3.1
9.0
EPSS
8.3%
CVE-2019-9189 Jun 05, 18:29 HIGH POC THREAT This Week

Prima Systems FlexAir, Versions 2.4.9api3 and prior. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Python File Upload Flexair Primasystems
NVD Exploit-DB
CVSS 3.0
8.8
EPSS
11.6%
EPSS 18% CVSS 7.2
HIGH POC THREAT This Week

Prima Systems FlexAir, Versions 2.3.38 and prior. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Command Injection Flexair Primasystems
NVD Exploit-DB
EPSS 31% CVSS 8.8
HIGH POC THREAT This Week

Prima Systems FlexAir, Versions 2.3.38 and prior. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

File Upload Flexair Primasystems
NVD
EPSS 2% CVSS 9.8
CRITICAL Act Now

Prima Systems FlexAir devices have Default Credentials. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Flexair Primasystems
NVD
EPSS 4% CVSS 9.8
CRITICAL POC Act Now

Prima Systems FlexAir, Versions 2.3.38 and prior. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Flexair Primasystems
NVD
EPSS 15% CVSS 8.8
HIGH POC THREAT This Week

Prima Systems FlexAir, Versions 2.3.38 and prior. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Authentication Bypass Flexair Primasystems
NVD Exploit-DB
EPSS 1% CVSS 8.8
HIGH This Week

Prima Systems FlexAir, Versions 2.3.38 and prior. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

CSRF Flexair Primasystems
NVD
EPSS 2% CVSS 8.8
HIGH This Week

Prima Systems FlexAir, Versions 2.3.38 and prior. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Authentication Bypass Flexair Primasystems
NVD
EPSS 2% CVSS 8.8
HIGH POC This Week

Prima Systems FlexAir, Versions 2.3.38 and prior. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Authentication Bypass Flexair Primasystems
NVD
EPSS 8% CVSS 9.0
CRITICAL POC Act Now

Prima Systems FlexAir, Versions 2.3.38 and prior. Rated critical severity (CVSS 9.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

XSS RCE Flexair +1
NVD Exploit-DB
EPSS 12% CVSS 8.8
HIGH POC THREAT This Week

Prima Systems FlexAir, Versions 2.4.9api3 and prior. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Python File Upload +2
NVD Exploit-DB

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy