Airpointer
Approved changes feed: RSS · Atom
cpe:2.3:a:jct:airpointer:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Jct (1f0d1935-d4f4-5cc1-8bc4-0e99abc25a24) |
|---|---|
| Product | Airpointer (b3461efd-5a1d-5642-8af9-9af1ac13409c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-4636 |
vulnerable | 2026-06-08 07:29:16.777112 |
Local Privilege Escalation
HIGH (7.8)
Due to excessive privileges granted to the web user running the airpointer web platform, a malicious actor that gains control of the this user would be able to privilege escalate to the root user
Published: 2025-05-30T08:24:50.630Z
Updated: 2025-05-30T12:58:45.485Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-4635 |
vulnerable | 2026-06-08 07:29:16.776863 |
Remote Code Execution
MEDIUM (6.6)
A malicious user with administrative privileges in the web portal would be able to manipulate the Diagnostics module to obtain remote code execution on the local device as a low privileged user.
Published: 2025-05-30T08:23:42.104Z
Updated: 2025-05-30T13:01:33.991Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-4634 |
vulnerable | 2026-06-08 07:29:16.776601 |
Local File Inclusion
MEDIUM (4.1)
The web portal on airpointer 2.4.107-2 was vulnerable local file inclusion. A malicious user with administrative privileges in the web portal would be able to manipulate requests to view files on the filesystem
Published: 2025-05-30T08:21:28.420Z
Updated: 2025-05-30T13:54:29.915Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-4633 |
vulnerable | 2026-06-08 07:29:16.776276 |
Default Credentials
MEDIUM (6.5)
Default credentials were present in the web portal for Airpointer 2.4.107-2, allowing an unauthenticated malicious actor to log in via the web portal
Published: 2025-05-30T08:14:50.821Z
Updated: 2025-05-30T13:55:29.519Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.