Cassianetworks

5 CVEs across 5 Cassianetworks products. Browse Cassianetworks vulnerabilities, severities, and proof-of-concept exploits.

Cassianetworks products with known CVEs

ProductCVEs
Access Controller4
Xc10001
Xc1000 Firmware1
Xc20001
Xc2000 Firmware1
Cassianetworks CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2023-31446Critical9.82024-01-10In Cassia Gateway firmware XC1000_2.1.1.2303082218 and XC2000_2.1.1.2303090947, the queueUrl parameter in /bypass/config is not sanitized. This leads to inject…
CVE-2023-35794High8.82023-10-27An issue was discovered in Cassia Access Controller 2.1.1.2303271039. The Web SSH terminal endpoint (spawned console) can be accessed without authentication. S…
CVE-2023-35793High8.82023-09-27An issue was discovered in Cassia Access Controller 2.1.1.2303271039. Establishing a web SSH session to gateways is vulnerable to Cross Site Request Forgery (C…
CVE-2023-31445Medium5.32023-05-11Cassia Access controller before 2.1.1.2203171453, was discovered to have a unprivileged -information disclosure vulnerability that allows read-only users have…
CVE-2021-22685Medium6.22022-10-14An attacker may be able to use minify route with a relative path to view any file on the Cassia Networks Access Controller prior to 2.0.1.