Cassianetworks Access Controller
4 CVEs affecting Cassianetworks Access Controller. Latest disclosed: 2023-10-27. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-35794 | High | 8.8 | 2023-10-27 | An issue was discovered in Cassia Access Controller 2.1.1.2303271039. The Web SSH terminal endpoint (spawned console) can be accessed without authentication. S… |
CVE-2023-35793 | High | 8.8 | 2023-09-27 | An issue was discovered in Cassia Access Controller 2.1.1.2303271039. Establishing a web SSH session to gateways is vulnerable to Cross Site Request Forgery (C… |
CVE-2021-22685 | Medium | 6.2 | 2022-10-14 | An attacker may be able to use minify route with a relative path to view any file on the Cassia Networks Access Controller prior to 2.0.1. |
CVE-2023-31445 | Medium | 5.3 | 2023-05-11 | Cassia Access controller before 2.1.1.2203171453, was discovered to have a unprivileged -information disclosure vulnerability that allows read-only users have… |