PatchTheCVEnvx220 firmware vulnerabilities and fixes
Recent CVEs affecting nvx220 firmware, with upgrade or downgrade steps. 2 tracked.
Also searched as: nvx220firmware.
nvx220 firmware has 2 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 0. Most recent: 2019-07-05. Highest priority: CVE-2018-14528 (score 64/100).
- CVE-2018-14529 HIGH 7.5 MITIGATE Invoxia NVX220 devices allow access to /bin/sh via escape from a restricted CLI, leading to disclosure of pass
- CVE-2018-14528 CRITICAL 9.8 MITIGATE Invoxia NVX220 devices allow TELNET access as admin with a default password.
FAQ
How do I fix nvx220 firmware vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is nvx220 firmware being exploited right now?
None of the tracked nvx220 firmware CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which nvx220 firmware CVE should I patch first?
CVE-2018-14528 currently ranks highest (64/100): Invoxia NVX220 devices allow TELNET access as admin with a default password..