Connectivity Engine 4 Firmware
Approved changes feed: RSS · Atom
cpe:2.3:o:cerner:connectivity_engine_4_firmware:*:*:*:*:*:*:*:*
part: o version: * update: *
| Vendor | Cerner (8e1ddcf2-5beb-5189-af1a-2e472d34a139) |
|---|---|
| Product | Connectivity Engine 4 Firmware (90f135cb-2a49-566a-b68d-f78a94d91b6e) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2018-20053 |
vulnerable | 2026-06-08 05:11:26.595134 |
Details available
An issue was discovered on Cerner Connectivity Engine (CCE) 4 devices. The hostname, timezone, and NTP server configurations on the CCE device are vulnerable to command injection by sending a crafted configuration file over the network.
Published: 2019-04-25T15:43:56.000Z
Updated: 2024-08-05T11:51:18.808Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-20052 |
vulnerable | 2026-06-08 05:11:26.594179 |
Details available
An issue was discovered on Cerner Connectivity Engine (CCE) 4 devices. The user running the main CCE firmware has NOPASSWD sudo privileges to several utilities that could be used to escalate privileges to root. One example is the "sudo ln -s /tmp/script /etc/cron.hourly/script" command.
Published: 2019-04-25T15:40:27.000Z
Updated: 2024-08-05T11:51:18.805Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.