PatchTheCVEeasyinstall vulnerabilities and fixes
Recent CVEs affecting easyinstall, with upgrade or downgrade steps. 7 tracked.
easyinstall has 7 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 0. Most recent: 2023-10-19. Highest priority: CVE-2023-30131 (score 60/100).
- CVE-2023-30132 HIGH 7.8 DOWNGRADE An issue discovered in IXP Data EasyInstall 6.6.14907.0 allows attackers to gain escalated privileges via stat
- CVE-2023-30131 CRITICAL 9.8 DOWNGRADE An issue discovered in IXP EasyInstall 6.6.14884.0 allows attackers to run arbitrary commands, gain escalated
- CVE-2023-27795 HIGH 7.8 DOWNGRADE An issue found in IXP Data Easy Install v.6.6.14884.0 allows a local attacker to gain privileges via a static
- CVE-2023-27793 HIGH 7.8 DOWNGRADE An issue discovered in IXP Data Easy Install v.6.6.14884.0 allows local attackers to gain escalated privileges
- CVE-2023-27792 HIGH 7.8 DOWNGRADE An issue found in IXP Data Easy Install v.6.6.14884.0 allows an attacker to escalate privileges via lack of pe
- CVE-2023-27791 HIGH 8.1 DOWNGRADE An issue found in IXP Data Easy Install 6.6.148840 allows a remote attacker to escalate privileges via insecur
- CVE-2022-35120 HIGH 8.8 DOWNGRADE IXPdata EasyInstall 6.6.14725 contains an access control issue.
FAQ
How do I fix easyinstall vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is easyinstall being exploited right now?
None of the tracked easyinstall CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which easyinstall CVE should I patch first?
CVE-2023-30131 currently ranks highest (60/100): An issue discovered in IXP EasyInstall 6.6.14884.0 allows attackers to run arbitrary commands, gain escalated .