Group Controller Firmware

group_controller_firmware

Vendor: Kone • 4 CVEs

CVEs (4)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2018-15486 1Kone 1Group Controller Firmware Nov 21, 2024 Sep 7, 2018 N/A· v4 9.1 CRITICAL· v3 6.4 MEDIUM· v2 An issue was discovered on KONE Group Controller (KGC) devices before 4.6.5. Unauthenticated Local File Inclusion and File modification is possible through the open HTTP interface by modifying the name parameter of the f...Show more An issue was discovered on KONE Group Controller (KGC) devices before 4.6.5. Unauthenticated Local File Inclusion and File modification is possible through the open HTTP interface by modifying the name parameter of the file endpoint, aka KONE-02.Show less
CVE-2018-15485 1Kone 1Group Controller Firmware Nov 21, 2024 Sep 7, 2018 N/A· v4 9.1 CRITICAL· v3 6.4 MEDIUM· v2 An issue was discovered on KONE Group Controller (KGC) devices before 4.6.5. FTP does not require authentication or authorization, aka KONE-03.
CVE-2018-15484 1Kone 1Group Controller Firmware Nov 21, 2024 Sep 7, 2018 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 An issue was discovered on KONE Group Controller (KGC) devices before 4.6.5. Unauthenticated Remote Code Execution is possible through the open HTTP interface by modifying autoexec.bat, aka KONE-01.
CVE-2018-15483 1Kone 1Group Controller Firmware Nov 21, 2024 Sep 7, 2018 N/A· v4 7.5 HIGH· v3 7.8 HIGH· v2 An issue was discovered on KONE Group Controller (KGC) devices before 4.6.5. Denial of Service can occur through the open HTTP interface, aka KONE-04.