Innominate vulnerabilities

5 vulnerabilities

Known vulnerabilities in Innominate products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 4 products.

Products

4
4CVE-2015-3966innominatemguard_firmware
EPSS score
1.62%
The IPsec SA establishment process on Innominate mGuard devices with firmware 8.x before 8.1.7 allows remote authenticated users to cause a denial of service (VPN service restart) by leveraging a peer relationship to send a crafted configuration with compression.9.1CVE-2020-12523innominateinnominate mguard rs4000 4tx/3g/tx vpn+17
EPSS score
0.90%
On Phoenix Contact mGuard Devices versions before 8.8.3 LAN ports get functional after reboot even if they are disabled in the device configuration. For mGuard devices with integrated switch on the LAN side, single switch ports can be disabled by device configuration. After a reboot these ports get functional independent from their configuration setting: Missing Initialization of Resource5CVE-2014-2356innominatemguard_firmware
EPSS score
3.38%
Innominate mGuard before 7.6.4 and 8.x before 8.0.3 does not require authentication for snapshot downloads, which allows remote attackers to obtain sensitive information via a crafted HTTPS request.9CVE-2014-9193innominatemguard_firmware
EPSS score
3.13%
Innominate mGuard with firmware before 7.6.6 and 8.x before 8.1.4 allows remote authenticated admins to obtain root privileges by changing a PPP configuration setting.7.1CVE-2012-3006innominatemguard_firmware
EPSS score
1.18%
The Innominate mGuard Smart HW before HW-101130 and BD before BD-101030, mGuard industrial RS, mGuard delta HW before HW-103060 and BD before BD-211010, mGuard PCI, mGuard blade, and EAGLE mGuard appliances with software before 7.5.0 do not use a sufficient source of entropy for private keys, which makes it easier for man-in-the-middle attackers to spoof (1) HTTPS or (2) SSH servers by predicting a key value.