Approved changes feed: RSS · Atom

cpe:2.3:o:relyum:rely-pcie_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorRelyum (a8fcedfe-d688-5d5d-bc49-bcd71b353ded)
ProductRely Pcie Firmware (2556aefe-4178-586b-b447-427731d6c377)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-44577 vulnerable 2026-06-08 06:45:54.078513 Details available
RELY-PCIe v22.2.1 to v23.1.0 was discovered to contain a command injection vulnerability via the time_date function.
Published: 2024-09-11T00:00:00.000Z
Updated: 2026-07-05T00:45:05.369Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-44575 vulnerable 2026-06-08 06:45:54.078109 Details available
RELY-PCIe v22.2.1 to v23.1.0 does not set the Secure attribute for sensitive cookies in HTTPS sessions, which could cause the user agent to send those cookies in cleartext over an HTTP session.
Published: 2024-09-11T00:00:00.000Z
Updated: 2026-07-05T00:44:58.988Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-44574 vulnerable 2026-06-08 06:45:54.077636 Details available
RELY-PCIe v22.2.1 to v23.1.0 was discovered to contain a command injection vulnerability via the sys_conf function.
Published: 2024-09-11T00:00:00.000Z
Updated: 2026-07-05T00:44:54.597Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-44573 vulnerable 2026-06-08 06:45:54.077330 Details available
A stored cross-site scripting (XSS) vulnerability in the VLAN configuration of RELY-PCIe v22.2.1 to v23.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.
Published: 2024-09-11T00:00:00.000Z
Updated: 2026-07-05T00:44:50.673Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-44572 vulnerable 2026-06-08 06:45:54.076859 Details available
RELY-PCIe v22.2.1 to v23.1.0 was discovered to contain a command injection vulnerability via the sys_mgmt function.
Published: 2024-09-11T00:00:00.000Z
Updated: 2026-07-05T00:44:46.173Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-44571 vulnerable 2026-06-08 06:45:54.076285 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-44570 vulnerable 2026-06-08 06:45:54.074427 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.