Iteris Vantage Velocity Firmware 2.3.1

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:o:iteris:vantage_velocity_firmware:2.3.1:*:*:*:*:*:*:*

part: o version: 2.3.1 update: *

VendorIteris (eed6c78c-f397-5b56-bea7-833e5c10b855)
ProductVantage Velocity Firmware (a3d99724-9f0b-58b2-9fbc-5feae21845f6)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-9024 vulnerable 2026-06-08 05:27:20.269268 Details available
Iteris Vantage Velocity Field Unit 2.3.1 and 2.4.2 devices have world-writable permissions for the /root/cleardata.pl (executed as root by crond) and /root/loadperl.sh (executed as root at boot time) scripts.
Published: 2020-02-17T03:03:10.000Z
Updated: 2024-08-04T10:19:19.662Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-9023 vulnerable 2026-06-08 05:27:20.268837 Details available
Iteris Vantage Velocity Field Unit 2.3.1 and 2.4.2 devices have two users that are not documented and are configured with weak passwords (User bluetooth, password bluetooth; User eclipse, password eclipse). Also, bluetooth is the root password.
Published: 2020-02-17T03:03:19.000Z
Updated: 2024-08-04T10:19:19.476Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-9020 vulnerable 2026-06-08 05:27:20.256220 Details available
Iteris Vantage Velocity Field Unit 2.3.1, 2.4.2, and 3.0 devices allow the injection of OS commands into cgi-bin/timeconfig.py via shell metacharacters in the NTP Server field.
Published: 2020-02-17T03:03:49.000Z
Updated: 2024-08-04T10:19:19.630Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.