Jct Airpointer
4 CVEs affecting Jct Airpointer. Latest disclosed: 2025-05-30. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-4636 | High | 7.8 | 2025-05-30 | Due to excessive privileges granted to the web user running the airpointer web platform, a malicious actor that gains control of the this user would be able to… |
CVE-2025-4635 | Medium | 6.6 | 2025-05-30 | A malicious user with administrative privileges in the web portal would be able to manipulate the Diagnostics module to obtain remote code execution on the loc… |
CVE-2025-4633 | Medium | 6.5 | 2025-05-30 | Default credentials were present in the web portal for Airpointer 2.4.107-2, allowing an unauthenticated malicious actor to log in via the web portal |
CVE-2025-4634 | Medium | 4.1 | 2025-05-30 | The web portal on airpointer 2.4.107-2 was vulnerable local file inclusion. A malicious user with administrative privileges in the web portal would be able to… |