Search vulnerabilities

Results 2

Export CSV
CVE-2015-6032

Qolsys IQ Panel (aka QOL) before 1.5.1 has hardcoded cryptographic keys, which allows remote attackers to create digital signatures for code by leveraging knowledge of a key from a different installation.

CVSS 2.0 · 9.3 Critical EPSS 3.3% KEV · Not listed
Vendors
Products
CVE-2015-6033

Qolsys IQ Panel (aka QOL) before 1.5.1 does not verify the digital signatures of software updates, which allows man-in-the-middle attackers to bypass intended access restrictions via a modified update.

CVSS 2.0 · 9.3 Critical EPSS 2.4% KEV · Not listed
Vendors
Products