Approved changes feed: RSS · Atom

cpe:2.3:a:netvision_information:airpass:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorNetvision Information (235f751f-596d-51a9-b0ad-df88df9bd59e)
ProductAirpass (e47aca71-0d9b-5ca5-b83e-d3f519cc11ef)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-0457 vulnerable 2026-06-08 07:02:24.630162 NetVision Information airPASS - OS Command Injection
HIGH (8.8)
The airPASS from NetVision Information has an OS Command Injection vulnerability, allowing remote attackers with regular privileges to inject and execute arbitrary OS commands.
Published: 2025-01-16T01:37:41.739Z
Updated: 2025-01-16T15:36:31.672Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-0456 vulnerable 2026-06-08 07:02:24.629863 NetVision Information airPASS - Missing Authentication
CRITICAL (9.8)
The airPASS from NetVision Information has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to access the specific administrative functionality to retrieve * all accounts and passwords.
Published: 2025-01-16T01:34:14.599Z
Updated: 2025-01-16T15:37:24.318Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-0455 vulnerable 2026-06-08 07:02:24.629505 NetVision Information airPASS - SQL injection
CRITICAL (9.8)
The airPASS from NetVision Information has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read, modify, and delete database contents.
Published: 2025-01-16T01:29:25.439Z
Updated: 2025-01-16T15:41:05.904Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-48383 vulnerable 2026-06-08 06:14:27.127380 NetVision Information airPASS - Path Traversal
HIGH (7.5)
NetVision Information airPASS has a path traversal vulnerability within its parameter in a specific URL. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication and download arbitrary system files.
Published: 2024-01-15T02:37:58.921Z
Updated: 2025-06-17T21:09:22.864Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.