Vulnerabilities in LenelS2

11 results

Vexday analysis

LenelS2 apresenta 11 vulnerabilidades catalogadas, sendo 5 críticas, porém nenhuma sob exploração ativa conhecida (KEV). A fraqueza dominante é relacionada a problemas de confiança em fronteiras de segurança (CWE-425), indicando falhas no controle de acesso. Nenhuma nova vulnerabilidade foi divulgada nos últimos 90 dias, sugerindo que o risco atual está estabilizado, embora o volume de críticas demande atenção contínua.

CVE-2022-31479CRITICALRemote Code Execution via command injection of the hostnameEPSS 2.4%CVE-2022-31483CRITICALArbitrary file write via authenticated OSDP file uploadEPSS 1.7%CVE-2022-31481CRITICALRemote Code Execution via buffer overflow in firmware update processEPSS 1.5%CVE-2022-31486HIGHCommand injection via Advanced Networking route add functionalityEPSS 1.3%CVE-2022-31482HIGHDenial-of-Service via internal structure overflowEPSS 1.0%CVE-2022-31484HIGHUser Account Deletion UnauthenticatedEPSS 1.0%CVE-2022-31480HIGHUnauthenticated Firmware Upload and Arbitrary RebootEPSS 0.9%CVE-2022-31485MEDIUMUnauthenticated homepage note modificationEPSS 0.8%CVE-2024-2421CRITICALLenelS2 NetBox Improper Neutralization of Special ElementsEPSS 0.5%CVE-2024-2422CRITICALLenelS2 NetBox Improper Neutralization of Argumented DelimitersEPSS 0.5%CVE-2024-2420HIGHLenelS2 NetBox Hardcoded CredentialsEPSS 0.5%