Amegaview
by Mesa Labs
CVEs (5)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2021-27449 | Cri | 0.65 | 9.9 | 0.03 | Dec 21, 2021 | Mesa Labs AmegaView Versions 3.0 and prior has a command injection vulnerability that can be exploited to execute commands in the web server. | ||
| CVE-2021-27447 | Cri | 0.65 | 10.0 | 0.02 | Dec 21, 2021 | Mesa Labs AmegaView version 3.0 is vulnerable to a command injection, which may allow an attacker to remotely execute arbitrary code. | ||
| CVE-2021-27445 | Hig | 0.51 | 7.8 | 0.00 | Dec 21, 2021 | Mesa Labs AmegaView Versions 3.0 and prior has insecure file permissions that could be exploited to escalate privileges on the device. | ||
| CVE-2021-27453 | Hig | 0.48 | 7.3 | 0.01 | Dec 21, 2021 | Mesa Labs AmegaView Versions 3.0 uses default cookies that could be set to bypass authentication to the web application, which may allow an attacker to gain access. | ||
| CVE-2021-27451 | Hig | 0.48 | 7.3 | 0.01 | Dec 21, 2021 | Mesa Labs AmegaView Versions 3.0 and prior’s passcode is generated by an easily reversible algorithm, which may allow an attacker to gain access to the device. |
- risk 0.65cvss 9.9epss 0.03
Mesa Labs AmegaView Versions 3.0 and prior has a command injection vulnerability that can be exploited to execute commands in the web server.
- risk 0.65cvss 10.0epss 0.02
Mesa Labs AmegaView version 3.0 is vulnerable to a command injection, which may allow an attacker to remotely execute arbitrary code.
- risk 0.51cvss 7.8epss 0.00
Mesa Labs AmegaView Versions 3.0 and prior has insecure file permissions that could be exploited to escalate privileges on the device.
- risk 0.48cvss 7.3epss 0.01
Mesa Labs AmegaView Versions 3.0 uses default cookies that could be set to bypass authentication to the web application, which may allow an attacker to gain access.
- risk 0.48cvss 7.3epss 0.01
Mesa Labs AmegaView Versions 3.0 and prior’s passcode is generated by an easily reversible algorithm, which may allow an attacker to gain access to the device.