Caton vulnerabilities
We track 3 vulnerabilities in Caton products across 3 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on May 12, 2023.
Latest Caton vulnerabilities
- 9.8 Critical severity
Live: Improper Neutralization of Special Elements used in a Command
A vulnerability was found in Caton Live up to 2023-04-26 and classified as critical. This issue affects some unknown processing of the file /cgi-bin/ping.cgi of the component Mini_HTTPD. The manipulation of the argument address with the input ;id;uname${IFS}-a
- 9.8 Critical severity
Prime: Improper Neutralization of Special Elements used in a Command
A vulnerability was found in Caton Prime 2.1.2.51.e8d7225049(202303031001) and classified as critical. This issue affects some unknown processing of the file cgi-bin/tools_ping.cgi?action=Command of the component Ping Handler. The manipulation of the argument
- 9.8 Critical severity
CTP Relay Server: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in Caton CTP Relay Server 1.2.9 and classified as critical. This vulnerability affects unknown code of the file /server/api/v1/login of the component API. The manipulation of the argument username/password leads to sql injection.