CyberSecBulletin

Catontechnology vulnerabilities

We track 2 vulnerabilities in Catontechnology products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on May 12, 2023.

2vulnerabilities
2critical
0high
0exploited
9.8average CVSS score

Latest Catontechnology vulnerabilities

  • 9.8 Critical severity

    Live: Improper Neutralization of Special Elements used in a Command

    CVE-2023-2682CatonEPSS 1.88%

    A vulnerability was found in Caton Live up to 2023-04-26 and classified as critical. This issue affects some unknown processing of the file /cgi-bin/ping.cgi of the component Mini_HTTPD. The manipulation of the argument address with the input ;id;uname${IFS}-a

  • 9.8 Critical severity

    Prime: Improper Neutralization of Special Elements used in a Command

    CVE-2023-2520CatonEPSS 2.54%

    A vulnerability was found in Caton Prime 2.1.2.51.e8d7225049(202303031001) and classified as critical. This issue affects some unknown processing of the file cgi-bin/tools_ping.cgi?action=Command of the component Ping Handler. The manipulation of the argument