Moog Exvp7c2-3 Firmware
4 CVEs affecting Moog Exvp7c2-3 Firmware. Latest disclosed: 2020-08-21. Critical: 3, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-24054 | Critical | 9.8 | 2020-08-21 | The administration console of the Moog EXO Series EXVF5C-2 and EXVP7C2-3 units features a 'statusbroadcast' command that can spawn a given process repeatedly a… |
CVE-2020-24051 | Critical | 9.8 | 2020-08-21 | The Moog EXO Series EXVF5C-2 and EXVP7C2-3 units support the ONVIF interoperability IP-based physical security protocol, which requires authentication for some… |
CVE-2020-24052 | Critical | 9.1 | 2020-08-21 | Several XML External Entity (XXE) vulnerabilities in the Moog EXO Series EXVF5C-2 and EXVP7C2-3 units allow remote unauthenticated users to read arbitrary file… |
CVE-2020-24053 | High | 7.5 | 2020-08-21 | Moog EXO Series EXVF5C-2 and EXVP7C2-3 units have a hardcoded credentials vulnerability. This could cause a confidentiality issue when using the FTP, Telnet, o… |