← Back

Elitecore

elitecore

2 CVEs • 1 product

Products (1)

Click to collapse
Toggle
Cyberoam Unified Threat Management
cyberoam_unified_threat_management
2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2012-3372
1Elitecore
1Cyberoam Unified Threat Management
Apr 29, 2026
Jul 9, 2012
N/A· v4
7.4 HIGH· v3
5.8 MEDIUM· v2
The default configuration of Cyberoam UTM appliances uses the same Certification Authority certificate and same private key across different customers' installations, which makes it easier for man-in-the-middle attackers...Show more
The default configuration of Cyberoam UTM appliances uses the same Certification Authority certificate and same private key across different customers' installations, which makes it easier for man-in-the-middle attackers to spoof SSL servers by leveraging the presence of the Cyberoam_SSL_CA certificate in a list of trusted root certification authorities. NOTE: the vendor disputes the significance of this issue because the appliance "does not allow import or export of the foresaid private key.Show less
CVE-2011-5050
1Elitecore
1Cyberoam Unified Threat Management
Apr 29, 2026
Jan 4, 2012
N/A· v4
N/A· v3
6.0 MEDIUM· v2
SQL injection vulnerability in corporate/Controller in Elitecore Technologies Cyberoam UTM before 10.01.2 build 059 allows remote authenticated administrators to execute arbitrary SQL commands via the tableid parameter....Show more
SQL injection vulnerability in corporate/Controller in Elitecore Technologies Cyberoam UTM before 10.01.2 build 059 allows remote authenticated administrators to execute arbitrary SQL commands via the tableid parameter. NOTE: some of these details are obtained from third party information.Show less