ipecs nms vulnerabilities and fixes

Recent CVEs affecting ipecs nms, with upgrade or downgrade steps. 4 tracked.

Also searched as: ipecsnms.

ipecs nms has 4 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 0. Most recent: 2018-08-15. Highest priority: CVE-2018-10285 (score 68/100).

• CVE-2018-9245 CRITICAL 9.8 DOWNGRADE The Ericsson-LG iPECS NMS A.1Ac login portal has a SQL injection vulnerability in the User ID and password fie
• CVE-2018-15138 HIGH 7.5 DOWNGRADE Ericsson-LG iPECS NMS 30M allows directory traversal via ipecs-cm/download?filename=../ URIs.
• CVE-2018-10286 HIGH 8.8 DOWNGRADE The Ericsson-LG iPECS NMS A.1Ac web application discloses sensitive information such as the NMS admin credenti
• CVE-2018-10285 CRITICAL 9.8 DOWNGRADE The Ericsson-LG iPECS NMS A.1Ac web application uses incorrect access control mechanisms

FAQ

How do I fix ipecs nms vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is ipecs nms being exploited right now?

None of the tracked ipecs nms CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which ipecs nms CVE should I patch first?

CVE-2018-10285 currently ranks highest (68/100): The Ericsson-LG iPECS NMS A.1Ac web application uses incorrect access control mechanisms.

RSS feed for ipecs nms · ← Back to latest CVEs