cbcvebase.

Elsight Halo vulnerabilities

1 known vulnerability affecting elsight/elsight_halo.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL1

Vulnerabilities

Page 1 of 1
CVE-2022-36784P2CRITICALCVSS 9.8≥ All versions, < Update to version 10.6.12022-11-17
CVE-2022-36784 [CRITICAL] CWE-20 CVE-2022-36784: Elsight – Elsight Halo Remote Code Execution (RCE) Elsight Halo web panel allows us to perform con Elsight – Elsight Halo Remote Code Execution (RCE) Elsight Halo web panel allows us to perform connection validation. through the POST request : /api/v1/nics/wifi/wlan0/ping we can abuse DESTINATION parameter and leverage it to remote code execution.
nvd
Elsight Halo vulnerabilities | cvebase