NetVision Information vulnerabilities
We track 4 vulnerabilities in NetVision Information products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on January 16, 2025.
Latest NetVision Information vulnerabilities
- 8.8 High severity
airPASS: Improper Neutralization of Special Elements used in an OS Command
The airPASS from NetVision Information has an OS Command Injection vulnerability, allowing remote attackers with regular privileges to inject and execute arbitrary OS commands.
- 9.8 Critical severity
airPASS: Missing Authentication for Critical Functionality
The airPASS from NetVision Information has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to access the specific administrative functionality to retrieve * all accounts and passwords.
- 9.8 Critical severity
airPASS: Improper Neutralization of Special Elements used in an SQL Command
The airPASS from NetVision Information has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read, modify, and delete database contents.
- 7.5 High severity
airPASS: Improper Limitation of a Pathname to a Restricted Directory
NetVision Information airPASS has a path traversal vulnerability within its parameter in a specific URL. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication and download arbitrary system files.