GCVE - cpe:2.3:a:oring:iap-420:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:oring:iap-420:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Oring (`efa4d634-121e-5646-aee8-323a9ec4dc56`)
Product	Iap 420 (`c1d16318-52b4-5173-8065-ced04a39db2e`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-5411`	vulnerable	2026-06-08 06:56:15.850169	Command Injection Missing input validation and OS command integration of the input in the ORing IAP-420 web-interface allows authenticated command injection.This issue affects IAP-420 version 2.01e and below. Published: 2024-05-28T10:28:51.246Z Updated: 2025-10-08T09:14:56.574Z Open on db.gcve.eu Reference links https://cyberdanube.com/en/en-multiple-vulnerabilities-in-oring-iap420/ http://seclists.org/fulldisclosure/2024/May/36	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-5410`	vulnerable	2026-06-08 06:56:15.845731	Stored Cross-Site Scripting Missing input validation in the ORing IAP-420 web-interface allows stored Cross-Site Scripting (XSS).This issue affects IAP-420 version 2.01e and below. Published: 2024-05-28T10:23:16.991Z Updated: 2025-02-13T17:54:08.981Z Open on db.gcve.eu Reference links https://cyberdanube.com/en/en-multiple-vulnerabilities-in-oring-iap420/ http://seclists.org/fulldisclosure/2024/May/36	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-55548`	vulnerable	2026-06-08 06:54:17.062157	Denial of Service Improper check of password character lenght in ORing IAP-420 allows a forced deadlock. This issue affects IAP-420: through 2.01e. Published: 2024-12-10T16:34:02.230Z Updated: 2025-11-03T22:32:38.230Z Open on db.gcve.eu Reference links https://cyberdanube.com/security-research/st-polten-uas-multiple-vulnerabilities-in-oring-iap/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-55547`	vulnerable	2026-06-08 06:54:17.061712	Remote Command Execution via SNMP SNMP objects in NET-SNMP used in ORing IAP-420 allows Command Injection. This issue affects IAP-420: through 2.01e. Published: 2024-12-10T16:27:07.033Z Updated: 2025-11-03T22:32:36.781Z Open on db.gcve.eu Reference links https://cyberdanube.com/security-research/st-polten-uas-multiple-vulnerabilities-in-oring-iap/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-55546`	vulnerable	2026-06-08 06:54:17.061050	Stored Cross-Site Scripting Missing input validation in the ORing IAP-420 web-interface allows stored Cross-Site Scripting (XSS).This issue affects IAP-420 version 2.01e and below. Published: 2024-12-10T16:21:33.244Z Updated: 2025-11-03T22:32:35.343Z Open on db.gcve.eu Reference links https://cyberdanube.com/security-research/st-polten-uas-multiple-vulnerabilities-in-oring-iap/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-55545`	vulnerable	2026-06-08 06:54:17.060416	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-55544`	vulnerable	2026-06-08 06:54:17.058397	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.