Zingbox

11 CVEs across 1 Zingbox products. Browse Zingbox vulnerabilities, severities, and proof-of-concept exploits.

Zingbox products with known CVEs

ProductCVEs
Inspector11
Zingbox CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2019-1584Critical9.82019-10-09A security vulnerability exists in Zingbox Inspector version 1.293 and earlier, that allows for remote code execution if the Inspector were sent a malicious co…
CVE-2019-15023High7.52019-10-09A security vulnerability exists in Zingbox Inspector versions 1.294 and earlier, that results in passwords for 3rd party integrations being stored in cleartext…
CVE-2019-15022High7.52019-10-09A security vulnerability exists in Zingbox Inspector versions 1.294 and earlier, that allows for the Inspector to be susceptible to ARP spoofing.
CVE-2019-15021Medium5.32019-10-09A security vulnerability exists in the Zingbox Inspector versions 1.294 and earlier, that can allow an attacker to easily identify instances of Zingbox Inspect…
CVE-2019-15020Critical9.82019-10-09A security vulnerability exists in the Zingbox Inspector versions 1.293 and earlier, that could allow an attacker to supply an invalid software update image to…
CVE-2019-15019Critical9.82019-10-09A security vulnerability exists in the Zingbox Inspector versions 1.294 and earlier, that could allow an attacker to supply an invalid software update image to…
CVE-2019-15018High7.52019-10-09A security vulnerability exists in the Zingbox Inspector versions 1.280 and earlier, where authentication is not required when binding the Inspector instance t…
CVE-2019-15017High8.42019-10-09The SSH service is enabled on the Zingbox Inspector versions 1.294 and earlier, exposing SSH to the local network. When combined with PAN-SA-2019-0027, this ca…
CVE-2019-15016High8.82019-10-09An SQL injection vulnerability exists in the management interface of Zingbox Inspector versions 1.288 and earlier, that allows for unsanitized data provided by…
CVE-2019-15015High8.42019-10-09In the Zingbox Inspector, versions 1.294 and earlier, hardcoded credentials for root and inspector user accounts are present in the system software, which can…
CVE-2019-15014High8.82019-10-09A command injection vulnerability exists in the Zingbox Inspector versions 1.286 and earlier, that allows for an authenticated user to execute arbitrary system…