VYPR

TKS-IP-Gateway

by Gira Giersiepen

CVEs (2)

  • CVE-2020-10794CriMay 7, 2020
    risk 0.64cvss 9.8epss 0.01

    Gira TKS-IP-Gateway 4.0.7.7 is vulnerable to unauthenticated path traversal that allows an attacker to download the application database. This can be combined with CVE-2020-10795 for remote root access.

  • CVE-2020-10795HigMay 7, 2020
    risk 0.47cvss 7.2epss 0.04

    Gira TKS-IP-Gateway 4.0.7.7 is vulnerable to authenticated remote code execution via the backup functionality of the web frontend. This can be combined with CVE-2020-10794 for remote root access.