EG4 12000XP vulnerabilities

2 known vulnerabilities in EG4 12000XP from EG4 Electronics. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  EG4 12kPV: Download of Code Without Integrity Check

  CVE-2025-53520Aug 8, 2025EG4 Electronics

  The affected product allows firmware updates to be downloaded from EG4's website, transferred via USB dongles, or installed through EG4's Monitoring Center (remote, cloud-connected interface) or via a serial connection, and can install these files without inte

• 8.1 High severity

  EG4 12kPV: Improper Restriction of Excessive Authentication Attempts

  CVE-2025-46414Aug 8, 2025EG4 Electronics

  The affected product does not limit the number of attempts for inputting the correct PIN for a registered product, which may allow an attacker to gain unauthorized access using brute-force methods if they possess a valid device serial number. The API provides