CyberSecBulletin

Kardex vulnerabilities

We track 1 vulnerability in Kardex products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on February 15, 2023.

1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score

Latest Kardex vulnerabilities

  • 9.8 Critical severity

    Kardex Control Center: Improper Control of Generation of Code

    CVE-2023-22855KardexEPSS 14.8%

    Kardex Mlog MCC 5.7.12+0-a203c2a213-master allows remote code execution. It spawns a web interface listening on port 8088. A user-controllable path is handed to a path-concatenation method (Path.Combine from .NET) without proper sanitisation. This yields the p