Advantech

Wise-paas/rmm

5 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.1

CVE-2021-27437

  • EPSS 0.17%
  • Published 07.05.2021 15:15:07
  • Last modified 21.11.2024 05:57:59

The affected product allows attackers to obtain sensitive information from the WISE-PaaS dashboard. The system contains a hard-coded administrator username and password that can be used to query Grafana APIs. Authentication is not required for exploi...

6.5

CVE-2019-18229

  • EPSS 0.69%
  • Published 31.10.2019 22:15:11
  • Last modified 21.11.2024 04:32:53

Advantech WISE-PaaS/RMM, Versions 3.3.29 and prior. Lack of sanitization of user-supplied input cause SQL injection vulnerabilities. An attacker can leverage these vulnerabilities to disclose information.

7.5

CVE-2019-18227

  • EPSS 3.54%
  • Published 31.10.2019 22:15:10
  • Last modified 21.11.2024 04:32:52

Advantech WISE-PaaS/RMM, Versions 3.3.29 and prior. XXE vulnerabilities exist that may allow disclosure of sensitive data.

10

CVE-2019-13547

  • EPSS 0.29%
  • Published 31.10.2019 21:15:12
  • Last modified 21.11.2024 04:25:07

Advantech WISE-PaaS/RMM, Versions 3.3.29 and prior. There is an unsecured function that allows anyone who can access the IP address to use the function without authentication.

10

CVE-2019-13551

  • EPSS 0.99%
  • Published 31.10.2019 21:15:12
  • Last modified 21.11.2024 04:25:07

Advantech WISE-PaaS/RMM, Versions 3.3.29 and prior. Path traversal vulnerabilities are caused by a lack of proper validation of a user-supplied path prior to use in file operations. An attacker can leverage these vulnerabilities to remotely execute c...