Approved changes feed: RSS · Atom

cpe:2.3:a:opengear:opengear:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorOpengear (df61e64e-c9c0-5d29-bc4e-4b53ea45497c)
ProductOpengear (ef785266-0238-5cb4-a28d-6e39ab14d178)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/opengear/opengear.om purl2cpe 2026-06-01 10:14:46.888140

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-14456 vulnerable 2026-06-08 05:12:54.875874 Details available
Opengear console server firmware releases prior to 4.5.0 have a stored XSS vulnerability related to serial port logging. If a malicious user of an external system (connected to a serial port on an Opengear console server) sends crafted text to a serial port (that has logging enabled), the text will be replayed when the logs are viewed. Exploiting this vulnerability requires access to the serial port and/or console server.
Published: 2019-07-31T20:17:09.000Z
Updated: 2024-08-05T00:19:41.203Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.