Rely-pcie Firmware vulnerabilities

3 known vulnerabilities in Rely-pcie Firmware from Relyum. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  rely-pcie_firmware: Improper Access Control

  CVE-2023-47579Dec 13, 2023Relyum

  Relyum RELY-PCIe 22.2.1 devices suffer from a system group misconfiguration, allowing read access to the central password hash file of the operating system.

• 8.8 High severity

  rely-pcie_firmware: Cross-Site Request Forgery

  CVE-2023-47578Dec 13, 2023Relyum

  Relyum RELY-PCIe 22.2.1 and RELY-REC 23.1.0 devices are susceptible to Cross Site Request Forgery (CSRF) attacks due to the absence of CSRF protection in the web interface.

• 8.8 High severity

  Rely-pcie Firmware: Missing Authorization

  CVE-2023-47573Dec 13, 2023Relyum

  An issue discovered in Relyum RELY-PCIe 22.2.1 devices. The authorization mechanism is not enforced in the web interface, allowing a low-privileged user to execute administrative functions.