CyberSecBulletin

ORing vulnerabilities

We track 3 vulnerabilities in ORing products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on December 10, 2024.

3vulnerabilities
1critical
2high
0exploited
9.1average CVSS score

Latest ORing vulnerabilities

  • 8.8 High severity

    IAP-420: Improper Neutralization of Special Elements used in a Command

    CVE-2024-55544ORingEPSS 12.4%

    Missing input validation in the ORing IAP-420 web-interface allows authenticated Command Injections on OS level.This issue affects IAP-420 version 2.01e and below.

  • 8.8 High severity

    IAP-420: Improper Neutralization of Special Elements used in an OS Command

    CVE-2024-5411ORingEPSS 23.4%

    Missing input validation and OS command integration of the input in the ORing IAP-420 web-interface allows authenticated command injection.This issue affects IAP-420 version 2.01e and below.

  • 9.8 Critical severity

    IAP-420(+): Hidden Functionality

    CVE-2022-3203ORingEPSS 1.03%

    On ORing net IAP-420(+) with FW version 2.0m a telnet server is enabled by default and cannot permanently be disabled. You can connect to the device via LAN or WiFi with hardcoded credentials and get an administrative shell. These credentials are reset to defa