Iteris Vantage Velocity
4 CVEs affecting Iteris Vantage Velocity. Latest disclosed: 2020-02-17. Critical: 3, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-9024 | Critical | 9.8 | 2020-02-17 | Iteris Vantage Velocity Field Unit 2.3.1 and 2.4.2 devices have world-writable permissions for the /root/cleardata.pl (executed as root by crond) and /root/loa… |
CVE-2020-9023 | Critical | 9.8 | 2020-02-17 | Iteris Vantage Velocity Field Unit 2.3.1 and 2.4.2 devices have two users that are not documented and are configured with weak passwords (User bluetooth, passw… |
CVE-2020-9020 | Critical | 9.8 | 2020-02-17 | Iteris Vantage Velocity Field Unit 2.3.1, 2.4.2, and 3.0 devices allow the injection of OS commands into cgi-bin/timeconfig.py via shell metacharacters in the… |
CVE-2020-9025 | Medium | 6.1 | 2020-02-17 | Iteris Vantage Velocity Field Unit 2.4.2 devices have multiple stored XSS issues in all parameters of the Start Data Viewer feature of the /cgi-bin/loaddata.py… |