Inspur

2 CVEs vendor

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2021-27285 Jan 06, 22:15 HIGH POC This Week

An issue was discovered in Inspur ClusterEngine v4.0 that allows attackers to gain escalated Local privileges and execute arbitrary commands via /opt/tsce4/torque6/bin/getJobsByShell. Rated high severity (CVSS 8.4), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Privilege Escalation Clusterengine Inspur

NVD GitHub

CVSS 3.1

8.4

EPSS

0.1%

CVE-2020-26122 Dec 07, 16:15 HIGH This Week

Inspur NF5266M5 through 3.21.2 and other server M5 devices allow remote code execution via administrator privileges. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Jwt Attack Nf8480M5 Firmware Nf8260M5 Firmware Ns5162M5 Firmware +13

NVD

CVSS 3.1

7.2

EPSS

1.2%

CVE-2021-27285

EPSS 0% CVSS 8.4

HIGH POC This Week

Privilege Escalation Clusterengine Inspur

NVD GitHub

CVE-2020-26122

EPSS 1% CVSS 7.2

HIGH This Week

RCE Jwt Attack Nf8480M5 Firmware +15

NVD