PatchTheCVEco2scope vulnerabilities and fixes
Recent CVEs affecting co2scope, with upgrade or downgrade steps. 6 tracked.
co2scope has 6 tracked vulnerabilities, 3 critical. A fixed release or vendor patch exists for 6. Most recent: 2025-01-31. Highest priority: CVE-2024-55062 (score 61/100).
- CVE-2024-57587 CRITICAL 9.1 UPGRADE UPGRADE Multiple SQL injection vulnerabilities in EasyVirt DCScope <= 8.6.0 and CO2Scope <= 1.3.0 allows remote unauth
- CVE-2024-55062 CRITICAL 9.8 UPGRADE UPGRADE Code Injection vulnerability in EasyVirt DCScope <= 8.6.0 and CO2Scope <= 1.3.0 allows remote unauthenticated
- CVE-2024-53357 HIGH 7.5 UPGRADE UPGRADE Multiple SQL injection vulnerabilities in EasyVirt DCScope <= 8.6.0 and CO2Scope <= 1.3.0 allows remote authen
- CVE-2024-53356 CRITICAL 9.8 UPGRADE UPGRADE Weak JWT Secret vulnerabilitiy in EasyVirt DCScope <= 8.6.0 and CO2Scope <= 1.3.0 allows remote attackers to g
- CVE-2024-53355 HIGH 8.8 UPGRADE UPGRADE Multiple incorrect access control issues in EasyVirt DCScope <= 8.6.0 and CO2Scope <= 1.3.0 allows remote auth
- CVE-2024-53354 MEDIUM 6.5 UPGRADE UPGRADE Multiple SQL injection vulnerabilities in EasyVirt DCScope <= 8.6.0 and CO2Scope <= 1.3.0 allows remote authen
FAQ
How do I fix co2scope vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is co2scope being exploited right now?
None of the tracked co2scope CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which co2scope CVE should I patch first?
CVE-2024-55062 currently ranks highest (61/100): Code Injection vulnerability in EasyVirt DCScope <= 8.6.0 and CO2Scope <= 1.3.0 allows remote unauthenticated .