PatchTheCVEiap-420 firmware vulnerabilities and fixes
Recent CVEs affecting iap-420 firmware, with upgrade or downgrade steps. 5 tracked.
Also searched as: iap 420 firmware, iap-420firmware.
iap-420 firmware has 5 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 5. Most recent: 2024-12-10. Highest priority: CVE-2024-55547 (score 67/100).
- CVE-2024-55548 HIGH 7.5 UPGRADE Improper check of password character lenght in ORing IAP-420 allows a forced deadlock. This issue affects IAP-
- CVE-2024-55547 CRITICAL 9.8 UPGRADE SNMP objects in NET-SNMP used in ORing IAP-420 allows Command Injection. This issue affects IAP-420: through 2
- CVE-2024-55546 MEDIUM 5.4 UPGRADE Missing input validation in the ORing IAP-420 web-interface allows stored Cross-Site Scripting (XSS).This issu
- CVE-2024-55545 MEDIUM 6.1 UPGRADE Missing input validation in the ORing IAP-420 web-interface allows Cross-Site Scripting (XSS).This issue affec
- CVE-2024-55544 HIGH 8.8 UPGRADE Missing input validation in the ORing IAP-420 web-interface allows authenticated Command Injections on OS leve
FAQ
How do I fix iap-420 firmware vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is iap-420 firmware being exploited right now?
None of the tracked iap-420 firmware CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which iap-420 firmware CVE should I patch first?
CVE-2024-55547 currently ranks highest (67/100): SNMP objects in NET-SNMP used in ORing IAP-420 allows Command Injection. This issue affects IAP-420: through 2.