Endruntechnologies vulnerabilities

We track 10 vulnerabilities in Endruntechnologies products. 10 are rated high or critical, and none are known to be exploited. The most recent was published on October 6, 2025.

10vulnerabilities

3critical

7high

0exploited

8.3average CVSS score

Latest Endruntechnologies vulnerabilities

7.3 High severity
Sonoma D12 Firmware: Improper Neutralization of Input During Web Page Generation
CVE-2025-60967Oct 6, 2025Endruntechnologies
Cross Site Scripting (XSS) vulnerability in EndRun Technologies Sonoma D12 Network Time Server (GPS) F/W 6010-0076-000 Ver 4.00 allows attackers to gain sensitive information.
9.1 Critical severity
Sonoma D12 Firmware: Improper Neutralization of Special Elements used in an OS Command
CVE-2025-60965Oct 6, 2025EndruntechnologiesEPSS 1.21%
OS Command Injection vulnerability in EndRun Technologies Sonoma D12 Network Time Server (GPS) F/W 6010-0071-000 Ver 4.00 allows attackers to execute arbitrary code, cause a denial of service, gain escalated privileges, gain sensitive information, and possibly
9.1 Critical severity
Sonoma D12 Firmware: Improper Neutralization of Special Elements used in an OS Command
CVE-2025-60964Oct 6, 2025EndruntechnologiesEPSS 1.21%
OS Command Injection vulnerability in EndRun Technologies Sonoma D12 Network Time Server (GPS) F/W 6010-0071-000 Ver 4.00 allows attackers to execute arbitrary code, cause a denial of service, gain escalated privileges, gain sensitive information, and possibly
8.2 High severity
Sonoma D12 Firmware: Improper Neutralization of Special Elements used in an OS Command
CVE-2025-60963Oct 6, 2025Endruntechnologies
OS Command Injection vulnerability in EndRun Technologies Sonoma D12 Network Time Server (GPS) F/W 6010-0071-000 Ver 4.00 allows attackers to execute arbitrary code, cause a denial of service, gain escalated privileges, and gain sensitive information.
8.2 High severity
Sonoma D12 Firmware: Improper Neutralization of Special Elements used in an OS Command
CVE-2025-60962Oct 6, 2025Endruntechnologies
OS Command Injection vulnerability in EndRun Technologies Sonoma D12 Network Time Server (GPS) F/W 6010-0071-000 Ver 4.00 allows attackers to gain sensitive information, and possibly other unspecified impacts.
8.2 High severity
Sonoma D12 Firmware: Improper Neutralization of Special Elements used in an OS Command
CVE-2025-60960Oct 6, 2025Endruntechnologies
OS Command Injection vulnerability in EndRun Technologies Sonoma D12 Network Time Server (GPS) F/W 6010-0071-000 Ver 4.00 allows attackers to execute arbitrary code, cause a denial of service, gain escalated privileges, and gain sensitive information.
8.2 High severity
Sonoma D12 Firmware: Improper Neutralization of Special Elements used in an OS Command
CVE-2025-60959Oct 6, 2025Endruntechnologies
OS Command Injection vulnerability in EndRun Technologies Sonoma D12 Network Time Server (GPS) F/W 6010-0071-000 Ver 4.00 allows attackers to gain sensitive information.
7.3 High severity
Sonoma D12 Firmware: Improper Neutralization of Input During Web Page Generation
CVE-2025-60958Oct 6, 2025Endruntechnologies
Cross Site Scripting (XSS) vulnerability in EndRun Technologies Sonoma D12 Network Time Server (GPS) F/W 6010-0071-000 Ver 4.00 allows attackers to gain sensitive information.
9.9 Critical severity
Sonoma D12 Firmware: Improper Neutralization of Special Elements used in an OS Command
CVE-2025-60957Oct 6, 2025EndruntechnologiesEPSS 1.17%
OS Command Injection vulnerability in EndRun Technologies Sonoma D12 Network Time Server (GPS) F/W 6010-0071-000 Ver 4.00 allows attackers to execute arbitrary code, cause a denial of service, gain escalated privileges, and gain sensitive information.
8.0 High severity
Sonoma D12 Firmware: Cross-Site Request Forgery
CVE-2025-60956Oct 6, 2025Endruntechnologies
Cross Site Request Forgery (CSRF) vulnerability in EndRun Technologies Sonoma D12 Network Time Server (GPS) F/W 6010-0071-000 Ver 4.00 allows attackers to execute arbitrary code, cause a denial of service, gain escalated privileges, and gain sensitive informat