Approved changes feed: RSS · Atom

cpe:2.3:o:kyland:kps2204_6_port_managed_din-rail_programmable_serial_device_firmware:r0002.p05:*:*:*:*:*:*:*

part: o version: r0002.p05 update: *

VendorKyland (64aa23f4-ffa8-57b2-af35-e76787d316cf)
ProductKps2204 6 Port Managed Din Rail Programmable Serial Device Firmware (e2b19ac9-ec8e-5084-8895-b35adf75aedd)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-25011 vulnerable 2026-06-08 05:22:35.805001 Details available
A sensitive information disclosure vulnerability in Kyland KPS2204 6 Port Managed Din-Rail Programmable Serial Device Servers Software Version:R0002.P05 allows remote attackers to get username and password by request /cgi-bin/webadminget.cgi script via the browser.
Published: 2020-12-17T03:37:49.000Z
Updated: 2024-08-04T15:26:09.297Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-25010 vulnerable 2026-06-08 05:22:35.803506 Details available
An arbitrary code execution vulnerability in Kyland KPS2204 6 Port Managed Din-Rail Programmable Serial Device Servers Software Version:R0002.P05 allows remote attackers to upload a malicious script file by constructing a POST type request and writing a payload in the request parameters as an instruction to write a file.
Published: 2020-12-17T03:37:37.000Z
Updated: 2024-08-04T15:26:09.024Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.