Approved changes feed: RSS · Atom

cpe:2.3:o:kone:group_controller_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorKone (0f458b6b-7e78-5918-bde4-674785d355e5)
ProductGroup Controller Firmware (91bb3cbd-55fa-51ec-8a82-a99856edbb80)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-15486 vulnerable 2026-06-08 05:10:54.551286 Details available
An issue was discovered on KONE Group Controller (KGC) devices before 4.6.5. Unauthenticated Local File Inclusion and File modification is possible through the open HTTP interface by modifying the name parameter of the file endpoint, aka KONE-02.
Published: 2018-09-07T22:00:00.000Z
Updated: 2024-08-05T09:54:03.464Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-15485 vulnerable 2026-06-08 05:10:54.550939 Details available
An issue was discovered on KONE Group Controller (KGC) devices before 4.6.5. FTP does not require authentication or authorization, aka KONE-03.
Published: 2018-09-07T22:00:00.000Z
Updated: 2024-08-05T09:54:03.623Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-15484 vulnerable 2026-06-08 05:10:54.550577 Details available
An issue was discovered on KONE Group Controller (KGC) devices before 4.6.5. Unauthenticated Remote Code Execution is possible through the open HTTP interface by modifying autoexec.bat, aka KONE-01.
Published: 2018-09-07T22:00:00.000Z
Updated: 2024-08-05T09:54:03.476Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-15483 vulnerable 2026-06-08 05:10:54.549406 Details available
An issue was discovered on KONE Group Controller (KGC) devices before 4.6.5. Denial of Service can occur through the open HTTP interface, aka KONE-04.
Published: 2018-09-07T22:00:00.000Z
Updated: 2024-08-05T09:54:03.629Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.