Advantech Wise Paas\/Rmm vulnerabilities
5 vulnerabilities
Known vulnerabilities in Advantech Wise Paas\/Rmm, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2021-27437advantechwise-paas\/rmm
EPSS score1.24%
The affected product allows attackers to obtain sensitive information from the WISE-PaaS dashboard. The system contains a hard-coded administrator username and password that can be used to query Grafana APIs. Authentication is not required for exploitation on the WISE-PaaS/RMM (versions prior to 9.0.1).CVE-2019-13551advantechwise-paas\/rmmEPSS score4.91%
Advantech WISE-PaaS/RMM, Versions 3.3.29 and prior. Path traversal vulnerabilities are caused by a lack of proper validation of a user-supplied path prior to use in file operations. An attacker can leverage these vulnerabilities to remotely execute code while posing as an administrator.CVE-2019-13547advantechwise-paas\/rmmEPSS score3.30%
Advantech WISE-PaaS/RMM, Versions 3.3.29 and prior. There is an unsecured function that allows anyone who can access the IP address to use the function without authentication.CVE-2019-18227advantechwise-paas\/rmmEPSS score3.08%
Advantech WISE-PaaS/RMM, Versions 3.3.29 and prior. XXE vulnerabilities exist that may allow disclosure of sensitive data.CVE-2019-18229advantechwise-paas\/rmmEPSS score2.40%
Advantech WISE-PaaS/RMM, Versions 3.3.29 and prior. Lack of sanitization of user-supplied input cause SQL injection vulnerabilities. An attacker can leverage these vulnerabilities to disclose information.