Iteris Vantage Velocity
Approved changes feed: RSS · Atom
cpe:2.3:h:iteris:vantage_velocity:-:*:*:*:*:*:*:*
part: h version: - update: *
| Vendor | Iteris (eed6c78c-f397-5b56-bea7-833e5c10b855) |
|---|---|
| Product | Vantage Velocity (8b4b8c57-e78d-5b5c-9009-13b421458560) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-9025 |
not_vulnerable | 2026-06-08 05:27:20.269783 |
Details available
Iteris Vantage Velocity Field Unit 2.4.2 devices have multiple stored XSS issues in all parameters of the Start Data Viewer feature of the /cgi-bin/loaddata.py script.
Published: 2020-02-17T03:03:02.000Z
Updated: 2024-08-04T10:19:19.798Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-9024 |
not_vulnerable | 2026-06-08 05:27:20.269390 |
Details available
Iteris Vantage Velocity Field Unit 2.3.1 and 2.4.2 devices have world-writable permissions for the /root/cleardata.pl (executed as root by crond) and /root/loadperl.sh (executed as root at boot time) scripts.
Published: 2020-02-17T03:03:10.000Z
Updated: 2024-08-04T10:19:19.662Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-9023 |
not_vulnerable | 2026-06-08 05:27:20.268881 |
Details available
Iteris Vantage Velocity Field Unit 2.3.1 and 2.4.2 devices have two users that are not documented and are configured with weak passwords (User bluetooth, password bluetooth; User eclipse, password eclipse). Also, bluetooth is the root password.
Published: 2020-02-17T03:03:19.000Z
Updated: 2024-08-04T10:19:19.476Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-9020 |
not_vulnerable | 2026-06-08 05:27:20.258083 |
Details available
Iteris Vantage Velocity Field Unit 2.3.1, 2.4.2, and 3.0 devices allow the injection of OS commands into cgi-bin/timeconfig.py via shell metacharacters in the NTP Server field.
Published: 2020-02-17T03:03:49.000Z
Updated: 2024-08-04T10:19:19.630Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.