Zingbox Inspector
11 CVEs affecting Zingbox Inspector. Latest disclosed: 2019-10-09. Critical: 3, High: 7.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-1584 | Critical | 9.8 | 2019-10-09 | A security vulnerability exists in Zingbox Inspector version 1.293 and earlier, that allows for remote code execution if the Inspector were sent a malicious co… |
CVE-2019-15020 | Critical | 9.8 | 2019-10-09 | A security vulnerability exists in the Zingbox Inspector versions 1.293 and earlier, that could allow an attacker to supply an invalid software update image to… |
CVE-2019-15019 | Critical | 9.8 | 2019-10-09 | A security vulnerability exists in the Zingbox Inspector versions 1.294 and earlier, that could allow an attacker to supply an invalid software update image to… |
CVE-2019-15016 | High | 8.8 | 2019-10-09 | An SQL injection vulnerability exists in the management interface of Zingbox Inspector versions 1.288 and earlier, that allows for unsanitized data provided by… |
CVE-2019-15014 | High | 8.8 | 2019-10-09 | A command injection vulnerability exists in the Zingbox Inspector versions 1.286 and earlier, that allows for an authenticated user to execute arbitrary system… |
CVE-2019-15017 | High | 8.4 | 2019-10-09 | The SSH service is enabled on the Zingbox Inspector versions 1.294 and earlier, exposing SSH to the local network. When combined with PAN-SA-2019-0027, this ca… |
CVE-2019-15015 | High | 8.4 | 2019-10-09 | In the Zingbox Inspector, versions 1.294 and earlier, hardcoded credentials for root and inspector user accounts are present in the system software, which can… |
CVE-2019-15023 | High | 7.5 | 2019-10-09 | A security vulnerability exists in Zingbox Inspector versions 1.294 and earlier, that results in passwords for 3rd party integrations being stored in cleartext… |
CVE-2019-15022 | High | 7.5 | 2019-10-09 | A security vulnerability exists in Zingbox Inspector versions 1.294 and earlier, that allows for the Inspector to be susceptible to ARP spoofing. |
CVE-2019-15018 | High | 7.5 | 2019-10-09 | A security vulnerability exists in the Zingbox Inspector versions 1.280 and earlier, where authentication is not required when binding the Inspector instance t… |
CVE-2019-15021 | Medium | 5.3 | 2019-10-09 | A security vulnerability exists in the Zingbox Inspector versions 1.294 and earlier, that can allow an attacker to easily identify instances of Zingbox Inspect… |