Known Vulnerabilities for products from Hidglobal
Listed below are 15 of the newest known vulnerabilities associated with the vendor "Hidglobal".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2023-2904 json | The External Visitor Manager portal of HID’s SAFE versions 5.8.0 through 5.11.3 are vulnerable to manipulation within web f... | 7.3 - HIGH | 2023-06-07 | 2023-06-29 |
| CVE-2022-31486 json | An authenticated attacker can send a specially crafted route to the “edit_route.cgi” binary and have it execute shell com... | 8.8 - HIGH | 2022-06-06 | 2022-06-17 |
| CVE-2022-31485 json | An unauthenticated attacker can send a specially crafted packets to update the “notes” section of the home page of the we... | 5.3 - MEDIUM | 2022-06-06 | 2022-06-17 |
| CVE-2022-31484 json | An unauthenticated attacker can send a specially crafted network packet to delete a user from the web interface. This vulnera... | 7.5 - HIGH | 2022-06-06 | 2022-06-17 |
| CVE-2022-31483 json | An authenticated attacker can upload a file with a filename including “..” and “/” to achieve the ability to upload t... | 8.8 - HIGH | 2022-06-06 | 2022-06-17 |
| CVE-2022-31482 json | An unauthenticated attacker can send a specially crafted unauthenticated HTTP request to the device that can overflow a buffe... | 7.5 - HIGH | 2022-06-06 | 2022-06-17 |
| CVE-2022-31481 json | An unauthenticated attacker can send a specially crafted update file to the device that can overflow a buffer. This vulnerabi... | 10 - CRITICAL | 2022-06-06 | 2022-06-17 |
| CVE-2022-31480 json | An unauthenticated attacker could arbitrarily upload firmware files to the target device, ultimately causing a Denial-of-Serv... | 7.5 - HIGH | 2022-06-06 | 2022-06-17 |
| CVE-2022-31479 json | An unauthenticated attacker can update the hostname with a specially crafted name that will allow for shell commands to be ex... | 9.8 - CRITICAL | 2022-06-06 | 2023-06-29 |
| CVE-2020-36283 json | HID OMNIKEY 5427 and OMNIKEY 5127 readers are vulnerable to CSRF when using the EEM driver (Ethernet Emulation Mode). By pers... | 8.8 - HIGH | 2021-03-24 | 2021-03-26 |
| CVE-2019-13603 json | An issue was discovered in the HID Global DigitalPersona (formerly Crossmatch) U.are.U 4500 Fingerprint Reader Windows Biomet... | 5.9 - MEDIUM | 2019-07-16 | 2021-09-13 |
| CVE-2018-17492 json | EasyLobby Solo contains default administrative credentials. An attacker could exploit this vulnerability to gain full access ... | 7.8 - HIGH | 2019-03-21 | 2019-10-09 |
| CVE-2018-17491 json | EasyLobby Solo could allow a local attacker to gain elevated privileges on the system. By visiting the kiosk and typing "esc"... | 7.8 - HIGH | 2019-03-21 | 2020-08-24 |
| CVE-2018-17490 json | EasyLobby Solo is vulnerable to a denial of service. By visiting the kiosk and accessing the task manager, a local attacker c... | 7.1 - HIGH | 2019-03-21 | 2020-08-24 |
| CVE-2018-17489 json | EasyLobby Solo could allow a local attacker to obtain sensitive information, caused by the storing of the social security num... | 5.5 - MEDIUM | 2019-03-21 | 2019-10-09 |
Known software with vulnerabilities from Hidglobal
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Hidglobal | Easylobby Solo | 11.0.4563 |