Gira: >> Tks-Ip-Gateway Firmware >> 4.0.7.7 Security Vulnerabilities
Gira TKS-IP-Gateway 4.0.7.7 is vulnerable to unauthenticated path traversal that allows an attacker to download the application database. This can be combined with CVE-2020-10795 for remote root access.
CVSS Score
9.8
EPSS Score
0.014
Published
2020-05-07
Gira TKS-IP-Gateway 4.0.7.7 is vulnerable to authenticated remote code execution via the backup functionality of the web frontend. This can be combined with CVE-2020-10794 for remote root access.
CVSS Score
7.2
EPSS Score
0.063
Published
2020-05-07