Skip to main content

Zumtobel

3 CVEs vendor

Monthly

CVE-2023-24294 Nov 29, 01:15 HIGH This Week

Zumtobel Netlink CCD Onboard v3.74 - Firmware v3.80 was discovered to contain a buffer overflow via the component NetlinkWeb::Information::SetDeviceIdentification. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Netlink Ccd Firmware Zumtobel
NVD VulDB
CVSS 3.1
7.5
EPSS
0.9%
CVE-2023-23325 Nov 29, 01:15 CRITICAL Act Now

Zumtobel Netlink CCD Onboard 3.74 - Firmware 3.80 was discovered to contain a command injection vulnerability via the NetHostname parameter. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Command Injection Netlink Ccd Firmware Zumtobel
NVD VulDB
CVSS 3.1
9.8
EPSS
2.0%
CVE-2023-23324 Nov 29, 01:15 CRITICAL Act Now

Zumtobel Netlink CCD Onboard 3.74 - Firmware 3.80 was discovered to contain hardcoded credentials for the Administrator account. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Netlink Ccd Firmware Zumtobel
NVD VulDB
CVSS 3.1
9.8
EPSS
0.9%
EPSS 1% CVSS 7.5
HIGH This Week

Zumtobel Netlink CCD Onboard v3.74 - Firmware v3.80 was discovered to contain a buffer overflow via the component NetlinkWeb::Information::SetDeviceIdentification. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Netlink Ccd Firmware Zumtobel
NVD VulDB
EPSS 2% CVSS 9.8
CRITICAL Act Now

Zumtobel Netlink CCD Onboard 3.74 - Firmware 3.80 was discovered to contain a command injection vulnerability via the NetHostname parameter. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Command Injection Netlink Ccd Firmware Zumtobel
NVD VulDB
EPSS 1% CVSS 9.8
CRITICAL Act Now

Zumtobel Netlink CCD Onboard 3.74 - Firmware 3.80 was discovered to contain hardcoded credentials for the Administrator account. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Netlink Ccd Firmware Zumtobel
NVD VulDB

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy