Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 8

Export CSV
CVE-2024-55548

Denial of Service

Improper check of password character lenght in ORing IAP-420 allows a forced deadlock. This issue affects IAP-420: through 2.01e.

CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Vendors
Oringnet
Products
Iap-420 Iap-420 Firmware
CVE-2024-55547

Remote Command Execution via SNMP

SNMP objects in NET-SNMP used in ORing IAP-420 allows Command Injection. This issue affects IAP-420: through 2.01e.

CVSS 4.0 · 9.3 Critical EPSS 17.4% KEV · Not listed
Vendors
Oringnet
Products
Iap-420 Iap-420 Firmware
CVE-2024-55546

Stored Cross-Site Scripting

Missing input validation in the ORing IAP-420 web-interface allows stored Cross-Site Scripting (XSS).This issue affects IAP-420 version 2.01e and below.

CVSS 4.0 · 7.1 High EPSS < 1% KEV · Not listed
Vendors
Oringnet
Products
Iap-420 Iap-420 Firmware
CVE-2024-55545

Reflected Cross-Site Scripting

Missing input validation in the ORing IAP-420 web-interface allows Cross-Site Scripting (XSS).This issue affects IAP-420 version 2.01e and below.

CVSS 4.0 · 7.1 High EPSS < 1% KEV · Not listed
Vendors
Oringnet
Products
Iap-420 Iap-420 Firmware
CVE-2024-55544

Authenticated Command Injection

Missing input validation in the ORing IAP-420 web-interface allows authenticated Command Injections on OS level.This issue affects IAP-420 version 2.01e and below.

CVSS 4.0 · 8.7 High EPSS 12.4% KEV · Not listed
Vendors
Oringnet
Products
Iap-420 Iap-420 Firmware
CVE-2024-5410

Stored Cross-Site Scripting

Missing input validation in the ORing IAP-420 web-interface allows stored Cross-Site Scripting (XSS).This issue affects IAP-420 version 2.01e and below.

CVSS 4.0 · 8.3 High EPSS 13.7% KEV · Not listed
Vendors
Oringnet
Products
Iap-420 Iap-420 Firmware
CVE-2024-5411

Command Injection

Missing input validation and OS command integration of the input in the ORing IAP-420 web-interface allows authenticated command injection.This issue affects IAP-420 version 2.01e and below.

CVSS 4.0 · 8.7 High EPSS 23.4% KEV · Not listed
Vendors
Oringnet
Products
Iap-420 Iap-420 Firmware
CVE-2022-3203

ORing net IAP-420(+) Hidden Functionality

On ORing net IAP-420(+) with FW version 2.0m a telnet server is enabled by default and cannot permanently be disabled. You can connect to the device via LAN or WiFi with hardcoded credentials and get an administrative shell. These credentials are reset to defaults with every reboot.

CVSS 3.1 · 9.8 Critical EPSS 1.0% KEV · Not listed
Vendors
Oringnet
Products
Iap-420 Iap-420\+ Iap-420\+ Firmware and 1 more