Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 1

Export CSV
CVE-2023-31446

In Cassia Gateway firmware XC1000_2.1.1.2303082218 and XC2000_2.1.1.2303090947, the queueUrl parameter in /bypass/config is not sanitized. This leads to injecting Bash code and executing it with root privileges on device startup.

CVSS 3.1 · 9.8 Critical EPSS 61.1% KEV · Not listed
Vendors
Cassianetworks
Products
Xc1000 Xc1000 Firmware Xc2000 and 1 more