PatchTheCVEreedos vulnerabilities
Recent CVEs affecting reedos products. 5 tracked.
reedos has 5 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 0. Most recent: 2024-09-11. Highest priority: CVE-2024-45790 (score 51/100).
- CVE-2024-45790 CRITICAL 9.8 DOWNGRADE This vulnerability exists in Reedos aiM-Star version 2.0.1 due to missing restrictions for excessive failed au
- CVE-2024-45789 MEDIUM 4.3 DOWNGRADE This vulnerability exists in Reedos aiM-Star version 2.0.1 due to improper validation of the ‘mode’ parameter
- CVE-2024-45788 HIGH 7.5 DOWNGRADE This vulnerability exists in Reedos aiM-Star version 2.0.1 due to missing rate limiting on OTP requests in cer
- CVE-2024-45787 MEDIUM 6.5 DOWNGRADE This vulnerability exists in Reedos aiM-Star version 2.0.1 due to transmission of sensitive information in pla
- CVE-2024-45786 MEDIUM 6.5 DOWNGRADE This vulnerability exists in Reedos aiM-Star version 2.0.1 due to improper access controls on its certain API
FAQ
How do I fix reedos vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is reedos being exploited right now?
None of the tracked reedos CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which reedos CVE should I patch first?
CVE-2024-45790 currently ranks highest (51/100): This vulnerability exists in Reedos aiM-Star version 2.0.1 due to missing restrictions for excessive failed au.