PatchTheCVErangeeos vulnerabilities and fixes
Recent CVEs affecting rangeeos, with upgrade or downgrade steps. 4 tracked.
rangeeos has 4 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 0. Most recent: 2020-08-20. Highest priority: CVE-2020-16279 (score 60/100).
- CVE-2020-16282 HIGH 8.8 MITIGATE In the default configuration of Rangee GmbH RangeeOS 8.0.4, all components are executed in the context of the
- CVE-2020-16281 HIGH 7.8 DOWNGRADE The Kommbox component in Rangee GmbH RangeeOS 8.0.4 could allow a local authenticated attacker to escape from
- CVE-2020-16280 MEDIUM 5.5 DOWNGRADE Multiple Rangee GmbH RangeeOS 8.0.4 modules store credentials in plaintext including credentials of users for
- CVE-2020-16279 CRITICAL 9.8 DOWNGRADE The Kommbox component in Rangee GmbH RangeeOS 8.0.4 is vulnerable to Remote Code Execution due to untrusted us
FAQ
How do I fix rangeeos vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is rangeeos being exploited right now?
None of the tracked rangeeos CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which rangeeos CVE should I patch first?
CVE-2020-16279 currently ranks highest (60/100): The Kommbox component in Rangee GmbH RangeeOS 8.0.4 is vulnerable to Remote Code Execution due to untrusted us.