avocent umg-4000 firmware vulnerabilities and fixes

Recent CVEs affecting avocent umg-4000 firmware, with upgrade or downgrade steps. 3 tracked.

Also searched as: avocent umg 4000 firmware, avocentumg-4000firmware.

avocent umg-4000 firmware has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2020-03-30. Highest priority: CVE-2019-9507 (score 50/100).

• CVE-2019-9509 MEDIUM 6.3 MITIGATE The web interface of the Vertiv Avocent UMG-4000 version 4.2.1.19 is vulnerable to reflected XSS in an HTTP PO
• CVE-2019-9508 MEDIUM 6.3 MITIGATE The web interface of the Vertiv Avocent UMG-4000 version 4.2.1.19 is vulnerable to stored XSS
• CVE-2019-9507 HIGH 8.3 MITIGATE The web interface of the Vertiv Avocent UMG-4000 version 4.2.1.19 is vulnerable to command injection because t

FAQ

How do I fix avocent umg-4000 firmware vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is avocent umg-4000 firmware being exploited right now?

None of the tracked avocent umg-4000 firmware CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which avocent umg-4000 firmware CVE should I patch first?

CVE-2019-9507 currently ranks highest (50/100): The web interface of the Vertiv Avocent UMG-4000 version 4.2.1.19 is vulnerable to command injection because t.

RSS feed for avocent umg-4000 firmware · ← Back to latest CVEs