PatchTheCVEcompany vulnerabilities
Recent CVEs affecting company products. 4 tracked.
company has 4 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 0. Most recent: 2021-01-26. Highest priority: CVE-2020-27539 (score 62/100).
- CVE-2020-27542 MEDIUM 6.8 MITIGATE Rostelecom CS-C2SHW 5.0.082.1 is affected by: Bash command injection
- CVE-2020-27541 HIGH 7.5 MITIGATE Denial of Service vulnerability in Rostelecom CS-C2SHW 5.0.082.1
- CVE-2020-27540 CRITICAL 9.8 MITIGATE Bash injection vulnerability and bypass of signature verification in Rostelecom CS-C2SHW 5.0.082.1
- CVE-2020-27539 CRITICAL 9.8 MITIGATE Heap overflow with full parsing of HTTP respose in Rostelecom CS-C2SHW 5.0.082.1
FAQ
How do I fix company vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is company being exploited right now?
None of the tracked company CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which company CVE should I patch first?
CVE-2020-27539 currently ranks highest (62/100): Heap overflow with full parsing of HTTP respose in Rostelecom CS-C2SHW 5.0.082.1.