Approved changes feed: RSS · Atom

cpe:2.3:a:tacitine:firewall:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorTacitine (bf6ea5a1-1b28-5360-ade8-d2f5043468ab)
ProductFirewall (bd2f79a4-4149-56b8-bed4-23342e39fa45)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-40630 vulnerable 2026-06-08 05:48:27.767545 Improper Session Management Vulnerability in Tacitine Firewall
MEDIUM (6.5)
This vulnerability exists in Tacitine Firewall, all versions of EN6200-PRIME QUAD-35 and EN6200-PRIME QUAD-100 between 19.1.1 to 22.20.1 (inclusive), due to improper session management in the Tacitine Firewall web-based management interface. An unauthenticated remote attacker could exploit this vulnerability by sending a specially crafted http request on the targeted device. Successful exploitation of this vulnerability could allow an unauthenticated remote attacker to perform session fixation on the targeted device.
Published: 2022-09-23T18:13:47.025Z
Updated: 2025-05-22T18:16:08.278Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-40629 vulnerable 2026-06-08 05:48:27.766802 Sensitive Information Disclosure Vulnerability in Tacitine Firewall
HIGH (7.5)
This vulnerability exists in Tacitine Firewall, all versions of EN6200-PRIME QUAD-35 and EN6200-PRIME QUAD-100 between 19.1.1 to 22.20.1 (inclusive), due to insecure design in the Tacitine Firewall web-based management interface. An unauthenticated remote attacker could exploit this vulnerability by sending a specially crafted http request on the targeted device. Successful exploitation of this vulnerability could allow an unauthenticated remote attacker to view sensitive information on the targeted device.
Published: 2022-09-23T18:00:37.121Z
Updated: 2025-05-22T18:16:53.836Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-40628 vulnerable 2026-06-08 05:48:27.762844 Remote Code Execution Vulnerability in Tacitine Firewall
CRITICAL (9.8)
This vulnerability exists in Tacitine Firewall, all versions of EN6200-PRIME QUAD-35 and EN6200-PRIME QUAD-100 between 19.1.1 to 22.20.1 (inclusive), due to improper control of code generation in the Tacitine Firewall web-based management interface. An unauthenticated remote attacker could exploit this vulnerability by sending a specially crafted http request on the targeted device. Successful exploitation of this vulnerability could allow an unauthenticated remote attacker to execute arbitrary commands on the targeted device.
Published: 2022-09-23T15:37:32.259Z
Updated: 2025-05-22T19:59:29.947Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.