NetBox vulnerabilities
3 known vulnerabilities in NetBox from LenelS2. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.8 High severity
NetBox: Improper Neutralization of Argument Delimiters in a Command
LenelS2 NetBox access control and event monitoring system was discovered to contain an authenticated RCE in versions prior to and including 5.6.1, which allows an attacker to execute malicious commands.
- 9.8 Critical severity
NetBox: Improper Neutralization of Special Elements used in an OS Command
LenelS2 NetBox access control and event monitoring system was discovered to contain an unauthenticated RCE in versions prior to and including 5.6.1, which allows an attacker to execute malicious commands with elevated permissions.
- 9.8 Critical severity
NetBox: Use of Hard-coded Password
LenelS2 NetBox access control and event monitoring system was discovered to contain Hardcoded Credentials in versions prior to and including 5.6.1 which allows an attacker to bypass authentication requirements.