CyberSecBulletin

Ricon vulnerabilities

We track 2 vulnerabilities in Ricon products across 2 products. 2 are rated high or critical, and 1 has been exploited in real attacks. The most recent was published on February 4, 2022.

2vulnerabilities
1critical
1high
1exploited
8.7average CVSS score

Latest Ricon vulnerabilities

  • 9.8 Critical severity

    Industrial Cellular Router: Improper Neutralization of Special Elements used in an OS Command

    CVE-2022-0365RiconEPSS 2.18%

    The affected product is vulnerable to an authenticated OS command injection, which may allow an attacker to inject and execute arbitrary shell commands as the Admin (root) user.

  • 7.5 High severity

    OpenSSL Information Disclosure Exploited

    CVE-2014-0160OpenSSLEPSS 100%

    The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information from process memory via crafted packets that trigger a buffer over-read, a