PatchTheCVEzingbox vulnerabilities
Recent CVEs affecting zingbox products. 11 tracked.
zingbox has 11 tracked vulnerabilities, 3 critical. A fixed release or vendor patch exists for 11. Most recent: 2019-10-09. Highest priority: CVE-2019-1584 (score 61/100).
- CVE-2019-1584 CRITICAL 9.8 UPGRADE A security vulnerability exists in Zingbox Inspector version 1.293 and earlier, that allows for remote code ex
- CVE-2019-15023 HIGH 7.5 UPGRADE A security vulnerability exists in Zingbox Inspector versions 1.294 and earlier, that results in passwords for
- CVE-2019-15022 HIGH 7.5 UPGRADE A security vulnerability exists in Zingbox Inspector versions 1.294 and earlier, that allows for the Inspector
- CVE-2019-15021 MEDIUM 5.3 UPGRADE A security vulnerability exists in the Zingbox Inspector versions 1.294 and earlier, that can allow an attacke
- CVE-2019-15020 CRITICAL 9.8 UPGRADE A security vulnerability exists in the Zingbox Inspector versions 1.293 and earlier, that could allow an attac
- CVE-2019-15019 CRITICAL 9.8 UPGRADE A security vulnerability exists in the Zingbox Inspector versions 1.294 and earlier, that could allow an attac
- CVE-2019-15018 HIGH 7.5 UPGRADE A security vulnerability exists in the Zingbox Inspector versions 1.280 and earlier, where authentication is n
- CVE-2019-15017 HIGH 8.4 UPGRADE The SSH service is enabled on the Zingbox Inspector versions 1.294 and earlier, exposing SSH to the local netw
- CVE-2019-15016 HIGH 8.8 UPGRADE An SQL injection vulnerability exists in the management interface of Zingbox Inspector versions 1.288 and earl
- CVE-2019-15015 HIGH 8.4 UPGRADE In the Zingbox Inspector, versions 1.294 and earlier, hardcoded credentials for root and inspector user accoun
- CVE-2019-15014 HIGH 8.8 UPGRADE A command injection vulnerability exists in the Zingbox Inspector versions 1.286 and earlier, that allows for
FAQ
How do I fix zingbox vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is zingbox being exploited right now?
None of the tracked zingbox CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which zingbox CVE should I patch first?
CVE-2019-1584 currently ranks highest (61/100): A security vulnerability exists in Zingbox Inspector version 1.293 and earlier, that allows for remote code ex.