CyberSecBulletin

Relyum vulnerabilities

We track 3 vulnerabilities in Relyum products across 2 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on December 13, 2023.

3vulnerabilities
0critical
3high
0exploited
8.4average CVSS score

Latest Relyum vulnerabilities

  • 7.5 High severity

    rely-pcie_firmware: Improper Access Control

    CVE-2023-47579Relyum

    Relyum RELY-PCIe 22.2.1 devices suffer from a system group misconfiguration, allowing read access to the central password hash file of the operating system.

  • 8.8 High severity

    rely-pcie_firmware: Cross-Site Request Forgery

    CVE-2023-47578Relyum

    Relyum RELY-PCIe 22.2.1 and RELY-REC 23.1.0 devices are susceptible to Cross Site Request Forgery (CSRF) attacks due to the absence of CSRF protection in the web interface.

  • 8.8 High severity

    Rely-pcie Firmware: Missing Authorization

    CVE-2023-47573Relyum

    An issue discovered in Relyum RELY-PCIe 22.2.1 devices. The authorization mechanism is not enforced in the web interface, allowing a low-privileged user to execute administrative functions.