PatchTheCVEciges vulnerabilities and fixes
Recent CVEs affecting ciges, with upgrade or downgrade steps. 7 tracked.
ciges has 7 tracked vulnerabilities, 3 critical. A fixed release or vendor patch exists for 0. Most recent: 2024-03-22. Highest priority: CVE-2024-2724 (score 52/100).
- CVE-2024-2728 MEDIUM 4.1 DOWNGRADE Information exposure vulnerability in the CIGESv2 system
- CVE-2024-2727 MEDIUM 6.1 DOWNGRADE HTML injection vulnerability affecting the CIGESv2 system, which allows an attacker to inject arbitrary code a
- CVE-2024-2726 MEDIUM 6.1 DOWNGRADE Stored Cross-Site Scripting (Stored-XSS) vulnerability affecting the CIGESv2 system, allowing an attacker to e
- CVE-2024-2725 HIGH 7.5 DOWNGRADE Information exposure vulnerability in the CIGESv2 system
- CVE-2024-2724 CRITICAL 9.8 DOWNGRADE SQL injection vulnerability in the CIGESv2 system, through /ajaxServiciosAtencion.php, in the 'idServicio' par
- CVE-2024-2723 CRITICAL 9.8 DOWNGRADE SQL injection vulnerability in the CIGESv2 system, through /ajaxSubServicios.php, in the 'idServicio' paramete
- CVE-2024-2722 CRITICAL 9.8 DOWNGRADE SQL injection vulnerability in the CIGESv2 system, through /ajaxConfigTotem.php, in the 'id' parameter
FAQ
How do I fix ciges vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is ciges being exploited right now?
None of the tracked ciges CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which ciges CVE should I patch first?
CVE-2024-2724 currently ranks highest (52/100): SQL injection vulnerability in the CIGESv2 system, through /ajaxServiciosAtencion.php, in the 'idServicio' par.