Netman 204 Firmware
Approved changes feed: RSS · Atom
cpe:2.3:o:riello-ups:netman_204_firmware:*:*:*:*:*:*:*:*
part: o version: * update: *
| Vendor | Riello Ups (df9b499e-b533-5028-996a-fd8a69ff161b) |
|---|---|
| Product | Netman 204 Firmware (ec748d0d-9af6-5a15-a36c-a74897ae47ff) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-8878 |
vulnerable | 2026-06-08 07:00:25.892313 |
Unauthenticated Password Reset
The password recovery mechanism for the forgotten password in Riello Netman 204 allows an attacker to reset the admin password and take over control of the device.This issue affects Netman 204: through 4.05.
Published: 2024-09-24T15:14:31.153Z
Updated: 2025-11-04T16:16:08.912Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-8877 |
vulnerable | 2026-06-08 07:00:25.889066 |
SQL Injection
Improper neutralization of special elements results in a SQL Injection vulnerability in Riello Netman 204. It is only limited to the SQLite database of measurement data.This issue affects Netman 204: through 4.05.
Published: 2024-09-24T15:19:31.932Z
Updated: 2025-11-04T16:16:07.925Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-47893 |
vulnerable | 2026-06-08 05:50:40.948015 |
NetMan 204 Remote Code Execution
CRITICAL (10)
There is a remote code execution vulnerability that affects all versions of NetMan 204. A remote attacker could upload a firmware file containing a webshell, that could allow him to execute arbitrary code as root.
Published: 2023-10-03T11:28:22.794Z
Updated: 2024-09-23T17:16:37.513Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-47892 |
vulnerable | 2026-06-08 05:50:40.947378 |
Information disclosure in NetMan 204
MEDIUM (5.3)
All versions of NetMan 204 could allow an unauthenticated remote attacker to read a file (config.cgi) containing sensitive information, like credentials.
Published: 2023-10-03T11:27:05.404Z
Updated: 2024-09-23T17:08:29.667Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-47891 |
vulnerable | 2026-06-08 05:50:40.945942 |
Admin password reset in NetMan 204
HIGH (8.1)
All versions of NetMan 204 allow an attacker that knows the MAC and serial number of the device to reset the administrator password via the legitimate recovery function.
Published: 2023-10-03T11:25:42.757Z
Updated: 2024-09-06T14:10:43.167Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.