PatchTheCVEadremsoft vulnerabilities
Recent CVEs affecting adremsoft products. 8 tracked.
adremsoft has 8 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 4. Most recent: 2020-12-16. Highest priority: CVE-2019-14482 (score 64/100).
- CVE-2019-14483 HIGH 8.8 UPGRADE AdRem NetCrunch 10.6.0.4587 allows Credentials Disclosure
- CVE-2019-14482 CRITICAL 9.8 UPGRADE AdRem NetCrunch 10.6.0.4587 has a hardcoded SSL private key vulnerability in the NetCrunch web client
- CVE-2019-14481 MEDIUM 5.4 DOWNGRADE AdRem NetCrunch 10.6.0.4587 has a Cross-Site Request Forgery (CSRF) vulnerability in the NetCrunch web client
- CVE-2019-14480 CRITICAL 9.8 UPGRADE AdRem NetCrunch 10.6.0.4587 has an Improper Session Handling vulnerability in the NetCrunch web client, which
- CVE-2019-14479 HIGH 8.8 DOWNGRADE AdRem NetCrunch 10.6.0.4587 allows Remote Code Execution
- CVE-2019-14478 MEDIUM 5.4 DOWNGRADE AdRem NetCrunch 10.6.0.4587 has a stored Cross-Site Scripting (XSS) vulnerability in the NetCrunch web client
- CVE-2019-14477 MEDIUM 5.5 UPGRADE AdRem NetCrunch 10.6.0.4587 has Improper Credential Storage since the internal user database is readable by lo
- CVE-2019-14476 MEDIUM 6.5 DOWNGRADE AdRem NetCrunch 10.6.0.4587 has a Server-Side Request Forgery (SSRF) vulnerability in the NetCrunch server
FAQ
How do I fix adremsoft vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is adremsoft being exploited right now?
None of the tracked adremsoft CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which adremsoft CVE should I patch first?
CVE-2019-14482 currently ranks highest (64/100): AdRem NetCrunch 10.6.0.4587 has a hardcoded SSL private key vulnerability in the NetCrunch web client.