cassianetworks vulnerabilities

Recent CVEs affecting cassianetworks products. 2 tracked.

cassianetworks has 2 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 1. Most recent: 2024-01-10. Highest priority: CVE-2023-31446 (score 69/100).

• CVE-2023-35794 HIGH 8.8 DOWNGRADE An issue was discovered in Cassia Access Controller 2.1.1.2303271039
• CVE-2023-31446 CRITICAL 9.8 MITIGATE MITIGATE In Cassia Gateway firmware XC1000_2.1.1.2303082218 and XC2000_2.1.1.2303090947, the queueUrl parameter in /byp

FAQ

How do I fix cassianetworks vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is cassianetworks being exploited right now?

None of the tracked cassianetworks CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which cassianetworks CVE should I patch first?

CVE-2023-31446 currently ranks highest (69/100): In Cassia Gateway firmware XC1000_2.1.1.2303082218 and XC2000_2.1.1.2303090947, the queueUrl parameter in /byp.

Products

• access controller
• xc1000 firmware
• xc2000 firmware

← Back to latest CVEs