PatchTheCVEoringnet vulnerabilities
Recent CVEs affecting oringnet products. 5 tracked.
oringnet has 5 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 5. Most recent: 2024-12-10. Highest priority: CVE-2024-55547 (score 67/100).
- CVE-2024-55548 HIGH 7.5 UPGRADE Improper check of password character lenght in ORing IAP-420 allows a forced deadlock. This issue affects IAP-
- CVE-2024-55547 CRITICAL 9.8 UPGRADE SNMP objects in NET-SNMP used in ORing IAP-420 allows Command Injection. This issue affects IAP-420: through 2
- CVE-2024-55546 MEDIUM 5.4 UPGRADE Missing input validation in the ORing IAP-420 web-interface allows stored Cross-Site Scripting (XSS).This issu
- CVE-2024-55545 MEDIUM 6.1 UPGRADE Missing input validation in the ORing IAP-420 web-interface allows Cross-Site Scripting (XSS).This issue affec
- CVE-2024-55544 HIGH 8.8 UPGRADE Missing input validation in the ORing IAP-420 web-interface allows authenticated Command Injections on OS leve
FAQ
How do I fix oringnet vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is oringnet being exploited right now?
None of the tracked oringnet CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which oringnet CVE should I patch first?
CVE-2024-55547 currently ranks highest (67/100): SNMP objects in NET-SNMP used in ORing IAP-420 allows Command Injection. This issue affects IAP-420: through 2.