GCVE - cpe:2.3:h:kone:group_controller:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:kone:group_controller:-:*:*:*:*:*:*:*

part: h version: - update: *

Vendor	Kone (`0f458b6b-7e78-5918-bde4-674785d355e5`)
Product	Group Controller (`d5f36b37-c720-5a51-9898-0cbc8c51e11e`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2018-15486`	not_vulnerable	2026-06-08 05:10:54.551307	Details available An issue was discovered on KONE Group Controller (KGC) devices before 4.6.5. Unauthenticated Local File Inclusion and File modification is possible through the open HTTP interface by modifying the name parameter of the file endpoint, aka KONE-02. Published: 2018-09-07T22:00:00.000Z Updated: 2024-08-05T09:54:03.464Z Open on db.gcve.eu Reference links https://www.kone.com/en/vulnerability.aspx http://packetstormsecurity.com/files/149252/KONE-KGC-4.6.4-DoS-Code-Execution-LFI-Bypass.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-15485`	not_vulnerable	2026-06-08 05:10:54.550960	Details available An issue was discovered on KONE Group Controller (KGC) devices before 4.6.5. FTP does not require authentication or authorization, aka KONE-03. Published: 2018-09-07T22:00:00.000Z Updated: 2024-08-05T09:54:03.623Z Open on db.gcve.eu Reference links https://www.kone.com/en/vulnerability.aspx http://packetstormsecurity.com/files/149252/KONE-KGC-4.6.4-DoS-Code-Execution-LFI-Bypass.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-15484`	not_vulnerable	2026-06-08 05:10:54.550604	Details available An issue was discovered on KONE Group Controller (KGC) devices before 4.6.5. Unauthenticated Remote Code Execution is possible through the open HTTP interface by modifying autoexec.bat, aka KONE-01. Published: 2018-09-07T22:00:00.000Z Updated: 2024-08-05T09:54:03.476Z Open on db.gcve.eu Reference links https://www.kone.com/en/vulnerability.aspx http://packetstormsecurity.com/files/149252/KONE-KGC-4.6.4-DoS-Code-Execution-LFI-Bypass.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-15483`	not_vulnerable	2026-06-08 05:10:54.550018	Details available An issue was discovered on KONE Group Controller (KGC) devices before 4.6.5. Denial of Service can occur through the open HTTP interface, aka KONE-04. Published: 2018-09-07T22:00:00.000Z Updated: 2024-08-05T09:54:03.629Z Open on db.gcve.eu Reference links https://www.kone.com/en/vulnerability.aspx http://packetstormsecurity.com/files/149252/KONE-KGC-4.6.4-DoS-Code-Execution-LFI-Bypass.html	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.