Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

enttec datagate mk2 firmware 70044 vulnerabilities and exploits

(subscribe to this query)
6.1
CVSSv3

CVE-2019-12774

A number of stored XSS vulnerabilities have been identified in the web configuration feature in ENTTEC Datagate Mk2 70044_update_05032019-482 that could allow an unauthenticated threat actor to inject malicious code directly into the application. This affects, for example, the Pr...
Enttec Datagate Mk2 Firmware 70044Enttec Storm 24 Firmware 70044Enttec Pixelator Firmware 70044Enttec E-streamer Mk2 Firmware 70044
7.8
CVSSv3

CVE-2019-12777

An issue exists on the ENTTEC Datagate MK2, Storm 24, Pixelator, and E-Streamer MK2 with firmware 70044_update_05032019-482. They replace secure and protected directory permissions (set as default by the underlying operating system) with highly insecure read, write, and execute d...
Enttec Datagate Mk2 Firmware 70044Enttec Storm 24 Firmware 70044Enttec Pixelator Firmware 70044Enttec E-streamer Mk2 Firmware 70044
9.8
CVSSv3

CVE-2019-12776

An issue exists on the ENTTEC Datagate MK2, Storm 24, Pixelator, and E-Streamer MK2 with firmware 70044_update_05032019-482. They include a hard-coded SSH backdoor for remote SSH and SCP access as the root user. A command in the relocate and relocate_revB scripts copies the hardc...
Enttec Datagate Mk2 Firmware 70044Enttec Storm 24 Firmware 70044Enttec Pixelator Firmware 70044Enttec E-streamer Mk2 Firmware 70044
8.8
CVSSv3

CVE-2019-12775

An issue exists on the ENTTEC Datagate MK2, Storm 24, Pixelator, and E-Streamer MK2 with firmware 70044_update_05032019-482. They allow high-privileged root access by www-data via sudo without requiring appropriate access control. (Furthermore, the user account that controls the ...
Enttec Datagate Mk2 Firmware 70044Enttec Storm 24 Firmware 70044Enttec Pixelator Firmware 70044Enttec E-streamer Mk2 Firmware 70044
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-30065CVE-2024-5843CVE-2024-30080code executionCVE-2024-4577CVE-2024-26169wirelessremote code executionCVE-2024-36103
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook