Blackbox vulnerabilities
5 vulnerabilities
Known vulnerabilities in Blackbox products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 10 products.
Products
10- Hd Wireless Presentation System2 vulnerabilities
- Acr1000A R R21 vulnerabilities
- Acr1000A T R21 vulnerabilities
- Acr1002A R1 vulnerabilities
- Acr1002A T1 vulnerabilities
- Acr1020A T1 vulnerabilities
- Alertwerks Servsensor1 vulnerabilities
- Alertwerks Servsensor Contact1 vulnerabilities
- Alertwerks Servsensor Junior1 vulnerabilities
- Icompel1 vulnerabilities
CVE-2016-2311blackboxalertwerks_servsensor_firmware+2
EPSS score1.15%
Black Box AlertWerks ServSensor with firmware before SP473, AlertWerks ServSensor Junior with firmware before SP473, AlertWerks ServSensor Junior with PoE with firmware before SP473, and AlertWerks ServSensor Contact with firmware before SP473 allow remote authenticated users to discover administrator and user passwords via unspecified vectors.CVE-2022-4636black boxkvm acr1000a-r-r2+9EPSS score0.88%
Black Box KVM Firmware version 3.4.31307 on models ACR1000A-R-R2, ACR1000A-T-R2, ACR1002A-T, ACR1002A-R, and ACR1020A-T is vulnerable to path traversal, which may allow an attacker to steal user credentials and other sensitive information through local file inclusion.CVE-2019-15497blackboxicompel_firmware+1EPSS score2.93%
Black Box iCOMPEL 9.2.3 through 11.1.4, as used in ONELAN Net-Top-Box 9.2.3 through 11.1.4 and other products, has default credentials that allow remote attackers to access devices remotely via SSH, HTTP, HTTPS, and FTP.CVE-2019-3929barcowepresent_wipg-1000p_firmware+12KEVEPSS score98.95%
The Crestron AM-100 firmware 1.6.0.2, Crestron AM-101 firmware 2.7.0.1, Barco wePresent WiPG-1000P firmware 2.3.0.10, Barco wePresent WiPG-1600W before firmware 2.4.1.19, Extron ShareLink 200/250 firmware 2.0.3.4, Teq AV IT WIPS710 firmware 1.1.0.7, SHARP PN-L703WA firmware 1.4.2.3, Optoma WPS-Pro firmware 1.0.0.5, Blackbox HD WPS firmware 1.0.0.5, InFocus LiteShow3 firmware 1.0.16, and InFocus LiteShow4 2.0.0.7 are vulnerable to command injection via the file_transfer.cgi HTTP endpoint. A remote, unauthenticated attacker can use this vulnerability to execute operating system commands as root.CVE-2019-3930barcowepresent_wipg-1000p_firmware+12EPSS score6.96%
The Crestron AM-100 firmware 1.6.0.2, Crestron AM-101 firmware 2.7.0.1, Barco wePresent WiPG-1000P firmware 2.3.0.10, Barco wePresent WiPG-1600W before firmware 2.4.1.19, Extron ShareLink 200/250 firmware 2.0.3.4, Teq AV IT WIPS710 firmware 1.1.0.7, SHARP PN-L703WA firmware 1.4.2.3, Optoma WPS-Pro firmware 1.0.0.5, Blackbox HD WPS firmware 1.0.0.5, InFocus LiteShow3 firmware 1.0.16, and InFocus LiteShow4 2.0.0.7 are vulnerable to a stack buffer overflow in libAwgCgi.so's PARSERtoCHAR function. A remote, unauthenticated attacker can use this vulnerability to execute arbitrary code as root via a crafted request to the return.cgi endpoint.