Search vulnerabilities

Results 3

Export CSV
CVE-2014-3932

SQL injection vulnerability in the device registration component in wsf/webservice.php in CoSoSys Endpoint Protector 4 4.3.0.4 and 4.4.0.2 allows remote attackers to execute arbitrary SQL commands via unspecified parameters.

CVSS 2.0 · 7.5 High EPSS 1.2% KEV · Not listed
Vendors
CVE-2012-2994

The CoSoSys Endpoint Protector 4 appliance establishes an EPProot password based entirely on the appliance serial number, which makes it easier for remote attackers to obtain access via a brute-force attack.

CVSS 2.0 · 7.5 High EPSS 6.3% KEV · Not listed
Vendors