GCVE - cpe:2.3:h:oringnet:iap-420:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:oringnet:iap-420:-:*:*:*:*:*:*:*

part: h version: - update: *

Vendor	Oringnet (`bd93c2d1-adc0-5fc6-92f4-86098c3f2924`)
Product	Iap 420 (`b72682c1-aed8-594e-b31a-ca556d7a79f5`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-5411`	not_vulnerable	2026-06-08 06:56:15.850360	Command Injection Missing input validation and OS command integration of the input in the ORing IAP-420 web-interface allows authenticated command injection.This issue affects IAP-420 version 2.01e and below. Published: 2024-05-28T10:28:51.246Z Updated: 2025-10-08T09:14:56.574Z Open on db.gcve.eu Reference links https://cyberdanube.com/en/en-multiple-vulnerabilities-in-oring-iap420/ http://seclists.org/fulldisclosure/2024/May/36	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-5410`	not_vulnerable	2026-06-08 06:56:15.848098	Stored Cross-Site Scripting Missing input validation in the ORing IAP-420 web-interface allows stored Cross-Site Scripting (XSS).This issue affects IAP-420 version 2.01e and below. Published: 2024-05-28T10:23:16.991Z Updated: 2025-02-13T17:54:08.981Z Open on db.gcve.eu Reference links https://cyberdanube.com/en/en-multiple-vulnerabilities-in-oring-iap420/ http://seclists.org/fulldisclosure/2024/May/36	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-55548`	not_vulnerable	2026-06-08 06:54:17.062424	Denial of Service Improper check of password character lenght in ORing IAP-420 allows a forced deadlock. This issue affects IAP-420: through 2.01e. Published: 2024-12-10T16:34:02.230Z Updated: 2025-11-03T22:32:38.230Z Open on db.gcve.eu Reference links https://cyberdanube.com/security-research/st-polten-uas-multiple-vulnerabilities-in-oring-iap/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-55547`	not_vulnerable	2026-06-08 06:54:17.061768	Remote Command Execution via SNMP SNMP objects in NET-SNMP used in ORing IAP-420 allows Command Injection. This issue affects IAP-420: through 2.01e. Published: 2024-12-10T16:27:07.033Z Updated: 2025-11-03T22:32:36.781Z Open on db.gcve.eu Reference links https://cyberdanube.com/security-research/st-polten-uas-multiple-vulnerabilities-in-oring-iap/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-55546`	not_vulnerable	2026-06-08 06:54:17.061222	Stored Cross-Site Scripting Missing input validation in the ORing IAP-420 web-interface allows stored Cross-Site Scripting (XSS).This issue affects IAP-420 version 2.01e and below. Published: 2024-12-10T16:21:33.244Z Updated: 2025-11-03T22:32:35.343Z Open on db.gcve.eu Reference links https://cyberdanube.com/security-research/st-polten-uas-multiple-vulnerabilities-in-oring-iap/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-55545`	not_vulnerable	2026-06-08 06:54:17.060623	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-55544`	not_vulnerable	2026-06-08 06:54:17.059905	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-3203`	not_vulnerable	2026-06-08 05:47:19.711516	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.