Kone Group Controller Firmware vulnerabilities
4 known vulnerabilities affecting kone/group_controller_firmware.
Total CVEs
4
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL3HIGH1
Vulnerabilities
Page 1 of 1
CVE-2018-15484P2CRITICALCVSS 9.8fixed in 4.6.52018-09-07
CVE-2018-15484 [CRITICAL] CWE-78 CVE-2018-15484: An issue was discovered on KONE Group Controller (KGC) devices before 4.6.5. Unauthenticated Remote
An issue was discovered on KONE Group Controller (KGC) devices before 4.6.5. Unauthenticated Remote Code Execution is possible through the open HTTP interface by modifying autoexec.bat, aka KONE-01.
nvd
CVE-2018-15486P3CRITICALCVSS 9.1fixed in 4.6.52018-09-07
CVE-2018-15486 [CRITICAL] CWE-829 CVE-2018-15486: An issue was discovered on KONE Group Controller (KGC) devices before 4.6.5. Unauthenticated Local F
An issue was discovered on KONE Group Controller (KGC) devices before 4.6.5. Unauthenticated Local File Inclusion and File modification is possible through the open HTTP interface by modifying the name parameter of the file endpoint, aka KONE-02.
nvd
CVE-2018-15485P3CRITICALCVSS 9.1fixed in 4.6.52018-09-07
CVE-2018-15485 [CRITICAL] CWE-287 CVE-2018-15485: An issue was discovered on KONE Group Controller (KGC) devices before 4.6.5. FTP does not require au
An issue was discovered on KONE Group Controller (KGC) devices before 4.6.5. FTP does not require authentication or authorization, aka KONE-03.
nvd
CVE-2018-15483P4HIGHCVSS 7.5fixed in 4.6.52018-09-07
CVE-2018-15483 [HIGH] CWE-20 CVE-2018-15483: An issue was discovered on KONE Group Controller (KGC) devices before 4.6.5. Denial of Service can o
An issue was discovered on KONE Group Controller (KGC) devices before 4.6.5. Denial of Service can occur through the open HTTP interface, aka KONE-04.
nvd