GCVE - cpe:2.3:o:oringnet:iap-420_firmware:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:oringnet:iap-420_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

Vendor	Oringnet (`bd93c2d1-adc0-5fc6-92f4-86098c3f2924`)
Product	Iap 420 Firmware (`9d45995b-d30f-55d1-b9b9-a8dee7f94017`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-5411`	vulnerable	2026-06-08 06:56:15.850324	Command Injection Missing input validation and OS command integration of the input in the ORing IAP-420 web-interface allows authenticated command injection.This issue affects IAP-420 version 2.01e and below. Published: 2024-05-28T10:28:51.246Z Updated: 2025-10-08T09:14:56.574Z Open on db.gcve.eu Reference links https://cyberdanube.com/en/en-multiple-vulnerabilities-in-oring-iap420/ http://seclists.org/fulldisclosure/2024/May/36	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-5410`	vulnerable	2026-06-08 06:56:15.846664	Stored Cross-Site Scripting Missing input validation in the ORing IAP-420 web-interface allows stored Cross-Site Scripting (XSS).This issue affects IAP-420 version 2.01e and below. Published: 2024-05-28T10:23:16.991Z Updated: 2025-02-13T17:54:08.981Z Open on db.gcve.eu Reference links https://cyberdanube.com/en/en-multiple-vulnerabilities-in-oring-iap420/ http://seclists.org/fulldisclosure/2024/May/36	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-55548`	vulnerable	2026-06-08 06:54:17.062300	Denial of Service Improper check of password character lenght in ORing IAP-420 allows a forced deadlock. This issue affects IAP-420: through 2.01e. Published: 2024-12-10T16:34:02.230Z Updated: 2025-11-03T22:32:38.230Z Open on db.gcve.eu Reference links https://cyberdanube.com/security-research/st-polten-uas-multiple-vulnerabilities-in-oring-iap/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-55547`	vulnerable	2026-06-08 06:54:17.061746	Remote Command Execution via SNMP SNMP objects in NET-SNMP used in ORing IAP-420 allows Command Injection. This issue affects IAP-420: through 2.01e. Published: 2024-12-10T16:27:07.033Z Updated: 2025-11-03T22:32:36.781Z Open on db.gcve.eu Reference links https://cyberdanube.com/security-research/st-polten-uas-multiple-vulnerabilities-in-oring-iap/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-55546`	vulnerable	2026-06-08 06:54:17.061083	Stored Cross-Site Scripting Missing input validation in the ORing IAP-420 web-interface allows stored Cross-Site Scripting (XSS).This issue affects IAP-420 version 2.01e and below. Published: 2024-12-10T16:21:33.244Z Updated: 2025-11-03T22:32:35.343Z Open on db.gcve.eu Reference links https://cyberdanube.com/security-research/st-polten-uas-multiple-vulnerabilities-in-oring-iap/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-55545`	vulnerable	2026-06-08 06:54:17.060459	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-55544`	vulnerable	2026-06-08 06:54:17.059205	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.