netman_204_firmware 漏洞

高危2024/03/16

UPS Network Management Card 4 Path Traversal

UPS Network Management Card version 4 suffers from a path traversal vulnerability.

CVSS—

严重CVE-2024-88772024/03/07

Riello Netman 204 - SQL Injection

The three endpoints /cgi-bin/db_datalog_w.cgi, /cgi-bin/db_eventlog_w.cgi, and /cgi-bin/db_multimetr_w.cgi are vulnerable to SQL injection without prior authentication. This enables an attacker to modify the collected log data in an arbitrary way.

netman_204_firmwarePoC 已收录

CVSS9.8EPSS 87.4%

高危2023/10/20

Riello UPS NetMan 204 Network Card - Default Login

Default logins on Riello UPS NetMan 204 is used. Attacker can access to UPS and attacker can manipulate the UPS settings to disrupt the onsite systems.

netman_204_firmwarePoC 已收录RCE

CVSS—

netman_204_firmware

关联漏洞

UPS Network Management Card 4 Path Traversal

Riello Netman 204 - SQL Injection

Riello UPS NetMan 204 Network Card - Default Login