PatchTheCVEnetcrunch vulnerabilities and fixes
Recent CVEs affecting netcrunch, with upgrade or downgrade steps. 8 tracked.
netcrunch has 8 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 4. Most recent: 2020-12-16. Highest priority: CVE-2019-14482 (score 64/100).
- CVE-2019-14483 HIGH 8.8 UPGRADE AdRem NetCrunch 10.6.0.4587 allows Credentials Disclosure
- CVE-2019-14482 CRITICAL 9.8 UPGRADE AdRem NetCrunch 10.6.0.4587 has a hardcoded SSL private key vulnerability in the NetCrunch web client
- CVE-2019-14481 MEDIUM 5.4 DOWNGRADE AdRem NetCrunch 10.6.0.4587 has a Cross-Site Request Forgery (CSRF) vulnerability in the NetCrunch web client
- CVE-2019-14480 CRITICAL 9.8 UPGRADE AdRem NetCrunch 10.6.0.4587 has an Improper Session Handling vulnerability in the NetCrunch web client, which
- CVE-2019-14479 HIGH 8.8 DOWNGRADE AdRem NetCrunch 10.6.0.4587 allows Remote Code Execution
- CVE-2019-14478 MEDIUM 5.4 DOWNGRADE AdRem NetCrunch 10.6.0.4587 has a stored Cross-Site Scripting (XSS) vulnerability in the NetCrunch web client
- CVE-2019-14477 MEDIUM 5.5 UPGRADE AdRem NetCrunch 10.6.0.4587 has Improper Credential Storage since the internal user database is readable by lo
- CVE-2019-14476 MEDIUM 6.5 DOWNGRADE AdRem NetCrunch 10.6.0.4587 has a Server-Side Request Forgery (SSRF) vulnerability in the NetCrunch server
FAQ
How do I fix netcrunch vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is netcrunch being exploited right now?
None of the tracked netcrunch CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which netcrunch CVE should I patch first?
CVE-2019-14482 currently ranks highest (64/100): AdRem NetCrunch 10.6.0.4587 has a hardcoded SSL private key vulnerability in the NetCrunch web client.