Ucopia

9 CVEs across 4 Ucopia products. Browse Ucopia vulnerabilities, severities, and proof-of-concept exploits.

Ucopia products with known CVEs

ProductCVEs
Wireless Appliance5
Wireless Appliance Firmware4
Ucopia Wireless Appliance3
Express Wireless Appliance1
Ucopia CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2022-44720Critical9.82023-06-29An issue was discovered in Weblib Ucopia before 6.0.13. OS Command Injection injection can occur, related to chroot.
CVE-2022-44719High7.52023-06-29An issue was discovered in Weblib Ucopia before 6.0.13. The SSH Server has Insecure Permissions.
CVE-2020-25036High8.82021-02-02UCOPIA Wi-Fi appliances 6.0.5 allow authenticated remote attackers to escape the restricted administration shell CLI, and access a shell with admin user rights…
CVE-2020-25035Medium6.72021-02-02UCOPIA Wi-Fi appliances 6.0.5 allow arbitrary code execution with root privileges using chroothole_client's PHP call, a related issue to CVE-2017-11322.
CVE-2020-25037High8.22021-02-02UCOPIA Wi-Fi appliances 6.0.5 allow arbitrary code execution with admin user privileges via an escape from a restricted command.
CVE-2018-15481High8.82018-08-21Improper input sanitization within the restricted administration shell on UCOPIA Wireless Appliance devices using firmware version 5.1.x before 5.1.13 allows a…
CVE-2017-17743Medium6.72018-03-22Improper input sanitization within the restricted administration shell on UCOPIA Wireless Appliance devices before 4.4.20, 5.0.x before 5.0.19, and 5.1.x befor…
CVE-2017-11322High8.22017-10-03The chroothole_client executable in UCOPIA Wireless Appliance before 5.1.8 allows remote attackers to gain root privileges via a dollar sign ($) metacharacter…
CVE-2017-11321High7.22017-10-03The restricted shell interface in UCOPIA Wireless Appliance before 5.1.8 allows remote authenticated users to gain 'admin' privileges via shell metacharacters…