Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

Filtered by vendor Kone Subscribe
Filtered by product Group Controller
Total 4 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2018-15486 1 Kone 2 Group Controller, Group Controller Firmware 2019-10-02 6.4 MEDIUM 9.1 CRITICAL
An issue was discovered on KONE Group Controller (KGC) devices before 4.6.5. Unauthenticated Local File Inclusion and File modification is possible through the open HTTP interface by modifying the name parameter of the file endpoint, aka KONE-02.
CVE-2018-15483 1 Kone 2 Group Controller, Group Controller Firmware 2018-11-14 7.8 HIGH 7.5 HIGH
An issue was discovered on KONE Group Controller (KGC) devices before 4.6.5. Denial of Service can occur through the open HTTP interface, aka KONE-04.
CVE-2018-15484 1 Kone 2 Group Controller, Group Controller Firmware 2018-11-13 10.0 HIGH 9.8 CRITICAL
An issue was discovered on KONE Group Controller (KGC) devices before 4.6.5. Unauthenticated Remote Code Execution is possible through the open HTTP interface by modifying autoexec.bat, aka KONE-01.
CVE-2018-15485 1 Kone 2 Group Controller, Group Controller Firmware 2018-11-13 6.4 MEDIUM 9.1 CRITICAL
An issue was discovered on KONE Group Controller (KGC) devices before 4.6.5. FTP does not require authentication or authorization, aka KONE-03.