Fidelissecurity
Fidelissecurity Deception: vulnerabilidades y CVE
Fidelissecurity Deception tiene 13 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 1 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE13
Últimos 12 meses0
Críticas1
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2022-24394 | Alta (8.8) | 2.6% | — | 17 may 2022 | Vulnerability in Fidelis Network and Deception CommandPost enables authenticated command injection through the web interface using the “update_checkfile” value for the “filename” parameter. The vulnerability could allow… |
| CVE-2022-24393 | Alta (8.8) | 2.7% | — | 17 may 2022 | Vulnerability in Fidelis Network and Deception CommandPost enables authenticated command injection through the web interface using the “check_vertica_upgrade” value for the “cpIp” parameter. The vulnerability could… |
| CVE-2022-24392 | Alta (8.8) | 2.7% | — | 17 may 2022 | Vulnerability in Fidelis Network and Deception CommandPost enables authenticated command injection through the web interface using the “feed_comm_test” value for the “feed” parameter. The vulnerability could allow a… |
| CVE-2022-24391 | Alta (8.8) | 0.95% | — | 17 may 2022 | Vulnerability in Fidelis Network and Deception CommandPost enables SQL injection through the web interface by an attacker with user level access. The vulnerability is present in Fidelis Network and Deception versions… |
| CVE-2022-24390 | Alta (8.8) | 1.3% | — | 17 may 2022 | Vulnerability in rconfig “remote_text_file” enables an attacker with user level access to the CLI to inject user level commands into Fidelis Network and Deception CommandPost, Collector, Sensor, and Sandbox components… |
| CVE-2022-24389 | Alta (8.8) | 1.5% | — | 17 may 2022 | Vulnerability in rconfig “cert_utils” enables an attacker with user level access to the CLI to inject root level commands into Fidelis Network and Deception CommandPost, Collector, Sensor, and Sandbox components as well… |
| CVE-2022-24388 | Alta (8.8) | 1.5% | — | 17 may 2022 | Vulnerability in rconfig “date” enables an attacker with user level access to the CLI to inject root level commands into Fidelis Network and Deception CommandPost, Collector, Sensor, and Sandbox components as well as… |
| CVE-2022-0997 | Alta (7.8) | 0.51% | — | 17 may 2022 | Improper file permissions in the CommandPost, Collector, and Sensor components of Fidelis Network and Deception enables an attacker with local, administrative access to the CLI to modify affected script files, which… |
| CVE-2022-0486 | Alta (7.8) | 0.38% | — | 17 may 2022 | Improper file permissions in the CommandPost, Collector, Sensor, and Sandbox components of Fidelis Network and Deception enables an attacker with local, administrative access to the CLI to modify affected files and… |
| CVE-2021-35050 | Alta (7.5) | 1.0% | — | 25 jun 2021 | User credentials stored in a recoverable format within Fidelis Network and Deception CommandPost. In the event that an attacker gains access to the CommandPost, these values could be decoded and used to login to the… |
| CVE-2021-35049 | Alta (8.8) | 4.6% | — | 25 jun 2021 | Vulnerability in Fidelis Network and Deception CommandPost enables authenticated command injection through the web interface. The vulnerability could allow a specially crafted HTTP request to execute system commands on… |
| CVE-2021-35048 | Crítica (9.8) | 1.3% | — | 25 jun 2021 | Vulnerability in Fidelis Network and Deception CommandPost enables unauthenticated SQL injection through the web interface. The vulnerability could lead to exposure of authentication tokens in some versions of Fidelis… |
| CVE-2021-35047 | Alta (8.8) | 1.6% | — | 25 jun 2021 | Vulnerability in the CommandPost, Collector, and Sensor components of Fidelis Network and Deception enables an attacker with user level access to the CLI to inject root level commands into the component and neighboring… |