IAP-420 vulnerabilities

3 known vulnerabilities in IAP-420 from ORing. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  IAP-420: Improper Neutralization of Special Elements used in a Command

  CVE-2024-55544Dec 10, 2024ORingEPSS 12.4%

  Missing input validation in the ORing IAP-420 web-interface allows authenticated Command Injections on OS level.This issue affects IAP-420 version 2.01e and below.

• 8.8 High severity

  IAP-420: Improper Neutralization of Special Elements used in an OS Command

  CVE-2024-5411May 28, 2024ORingEPSS 23.4%

  Missing input validation and OS command integration of the input in the ORing IAP-420 web-interface allows authenticated command injection.This issue affects IAP-420 version 2.01e and below.

• 9.8 Critical severity

  IAP-420(+): Hidden Functionality

  CVE-2022-3203Oct 21, 2022ORingEPSS 1.03%

  On ORing net IAP-420(+) with FW version 2.0m a telnet server is enabled by default and cannot permanently be disabled. You can connect to the device via LAN or WiFi with hardcoded credentials and get an administrative shell. These credentials are reset to defa