Relyum: >> Rely-Pcie Security Vulnerabilities
RELY-PCIe v22.2.1 to v23.1.0 was discovered to contain a code injection vulnerability via the getParams function in phpinf.php.
CVSS Score
8.8
EPSS Score
0.002
Published
2024-09-11
RELY-PCIe v22.2.1 to v23.1.0 was discovered to contain incorrect access control in the mService function at phpinf.php.
CVSS Score
8.8
EPSS Score
0.002
Published
2024-09-11
RELY-PCIe v22.2.1 to v23.1.0 was discovered to contain a command injection vulnerability via the sys_mgmt function.
CVSS Score
8.8
EPSS Score
0.022
Published
2024-09-11
A stored cross-site scripting (XSS) vulnerability in the VLAN configuration of RELY-PCIe v22.2.1 to v23.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.
CVSS Score
4.7
EPSS Score
0.001
Published
2024-09-11
RELY-PCIe v22.2.1 to v23.1.0 was discovered to contain a command injection vulnerability via the sys_conf function.
CVSS Score
8.8
EPSS Score
0.022
Published
2024-09-11
RELY-PCIe v22.2.1 to v23.1.0 does not set the Secure attribute for sensitive cookies in HTTPS sessions, which could cause the user agent to send those cookies in cleartext over an HTTP session.
CVSS Score
3.7
EPSS Score
0.001
Published
2024-09-11
RELY-PCIe v22.2.1 to v23.1.0 was discovered to contain a command injection vulnerability via the time_date function.
CVSS Score
8.8
EPSS Score
0.022
Published
2024-09-11
An issue discovered in Relyum RELY-PCIe 22.2.1 devices. The authorization mechanism is not enforced in the web interface, allowing a low-privileged user to execute administrative functions.
CVSS Score
8.8
EPSS Score
0.002
Published
2023-12-13
An issue was discovered on Relyum RELY-PCIe 22.2.1 and RELY-REC 23.1.0 devices. There is a Weak SMB configuration with signing disabled.
CVSS Score
5.9
EPSS Score
0.002
Published
2023-12-13
An issue was discovered on Relyum RELY-PCIe 22.2.1 and RELY-REC 23.1.0 devices. The web interfaces of the Relyum devices are susceptible to reflected XSS.
CVSS Score
6.1
EPSS Score
0.003
Published
2023-12-13
Page 1