Vertiv
11 CVEs across 10 Vertiv products. Browse Vertiv vulnerabilities, severities, and proof-of-concept exploits.
Vertiv products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-50927 | Medium | 6.2 | 2026-01-13 | Cyclades Serial Console Server 3.3.0 contains a local privilege escalation vulnerability due to overly permissive sudo privileges for the admin user and admin… |
CVE-2025-46412 | Critical | 9.8 | 2025-05-21 | Affected Vertiv products do not properly protect webserver functions that could allow an attacker to bypass authentication. |
CVE-2025-41426 | Critical | 9.8 | 2025-05-21 | Affected Vertiv products contain a stack based buffer overflow vulnerability. An attacker could exploit this vulnerability to gain code execution on the device. |
CVE-2019-9509 | Medium | 6.3 | 2020-03-30 | The web interface of the Vertiv Avocent UMG-4000 version 4.2.1.19 is vulnerable to reflected XSS in an HTTP POST parameter. The web application does not neutra… |
CVE-2019-9508 | Medium | 6.3 | 2020-03-30 | The web interface of the Vertiv Avocent UMG-4000 version 4.2.1.19 is vulnerable to stored XSS. A remote attacker authenticated with an administrator account co… |
CVE-2019-9507 | High | 8.3 | 2020-03-30 | The web interface of the Vertiv Avocent UMG-4000 version 4.2.1.19 is vulnerable to command injection because the application incorrectly neutralizes code synta… |
CVE-2018-12922 | High | 7.5 | 2018-06-28 | Emerson Liebert IntelliSlot Web Card devices allow remote attackers to reconfigure access control via the config/configUser.htm or config/configTelnet.htm URI. |
CVE-2018-10079 | High | 7.8 | 2018-04-20 | Geist WatchDog Console 3.2.2 uses a weak ACL for the C:\ProgramData\WatchDog Console directory, which allows local users to modify configuration data by updati… |
CVE-2018-10078 | Medium | 4.8 | 2018-04-20 | Cross-site scripting (XSS) vulnerability in Geist WatchDog Console 3.2.2 allows remote authenticated administrators to inject arbitrary web script or HTML via… |
CVE-2018-10077 | Medium | 4.9 | 2018-04-20 | XML external entity (XXE) vulnerability in Geist WatchDog Console 3.2.2 allows remote authenticated administrators to read arbitrary files via crafted XML data. |
CVE-2015-7260 | High | 7.8 | 2017-04-10 | Liebert MultiLink Automated Shutdown v4.2.4 allows local users to gain privileges by replacing the LiebertM executable file. |