← Back

Kone

kone

4 CVEs • 2 products

Products (2)

Click to collapse
Toggle
Group Controller Firmware
group_controller_firmware
4 CVEs
Group Controller
group_controller
0 CVEs

CVEs (4)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2018-15486
1Kone
1Group Controller Firmware
Nov 21, 2024
Sep 7, 2018
N/A· v4
9.1 CRITICAL· v3
6.4 MEDIUM· v2
An issue was discovered on KONE Group Controller (KGC) devices before 4.6.5. Unauthenticated Local File Inclusion and File modification is possible through the open HTTP interface by modifying the name parameter of the f...Show more
An issue was discovered on KONE Group Controller (KGC) devices before 4.6.5. Unauthenticated Local File Inclusion and File modification is possible through the open HTTP interface by modifying the name parameter of the file endpoint, aka KONE-02.Show less
CVE-2018-15485
1Kone
1Group Controller Firmware
Nov 21, 2024
Sep 7, 2018
N/A· v4
9.1 CRITICAL· v3
6.4 MEDIUM· v2
An issue was discovered on KONE Group Controller (KGC) devices before 4.6.5. FTP does not require authentication or authorization, aka KONE-03.
CVE-2018-15484
1Kone
1Group Controller Firmware
Nov 21, 2024
Sep 7, 2018
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
An issue was discovered on KONE Group Controller (KGC) devices before 4.6.5. Unauthenticated Remote Code Execution is possible through the open HTTP interface by modifying autoexec.bat, aka KONE-01.
CVE-2018-15483
1Kone
1Group Controller Firmware
Nov 21, 2024
Sep 7, 2018
N/A· v4
7.5 HIGH· v3
7.8 HIGH· v2
An issue was discovered on KONE Group Controller (KGC) devices before 4.6.5. Denial of Service can occur through the open HTTP interface, aka KONE-04.