Veraxsystems: Security Vulnerabilities
Verax NMS prior to 2.1.0 has multiple security bypass vulnerabilities
CVSS Score
9.1
EPSS Score
0.006
Published
2020-01-30
Verax NMS prior to 2.10 allows authentication via the encrypted password without knowing the cleartext password.
CVSS Score
5.9
EPSS Score
0.008
Published
2020-01-30
Verax NMS prior to 2.1.0 uses an encryption key that is hardcoded in a JAR archive.
CVSS Score
7.5
EPSS Score
0.009
Published
2020-01-30
Verax NMS prior to 2.1.0 leaks connection details when any user executes a Repair Table action
CVSS Score
5.3
EPSS Score
0.002
Published
2020-01-30