Kone Group Controller
4 CVEs affecting Kone Group Controller. Latest disclosed: 2018-09-07. Critical: 3, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-15484 | Critical | 9.8 | 2018-09-07 | An issue was discovered on KONE Group Controller (KGC) devices before 4.6.5. Unauthenticated Remote Code Execution is possible through the open HTTP interface… |
CVE-2018-15486 | Critical | 9.1 | 2018-09-07 | An issue was discovered on KONE Group Controller (KGC) devices before 4.6.5. Unauthenticated Local File Inclusion and File modification is possible through the… |
CVE-2018-15485 | Critical | 9.1 | 2018-09-07 | An issue was discovered on KONE Group Controller (KGC) devices before 4.6.5. FTP does not require authentication or authorization, aka KONE-03. |
CVE-2018-15483 | High | 7.5 | 2018-09-07 | An issue was discovered on KONE Group Controller (KGC) devices before 4.6.5. Denial of Service can occur through the open HTTP interface, aka KONE-04. |