Vulnerabilities (CVE)

Filtered by vendor Hgiga Subscribe
Filtered by product Oaklouds Portal
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-37912 1 Hgiga 1 Oaklouds Portal 2021-09-28 10.0 HIGH 9.8 CRITICAL
The HGiga OAKlouds mobile portal does not filter special characters of the Ethernet number parameter of the network interface card setting page. Remote attackers can use this vulnerability to perform command injection and execute arbitrary commands in the system without logging in.
CVE-2021-37913 1 Hgiga 1 Oaklouds Portal 2021-09-28 10.0 HIGH 9.8 CRITICAL
The HGiga OAKlouds mobile portal does not filter special characters of the IPv6 Gateway parameter of the network interface card setting page. Remote attackers can use this vulnerability to perform command injection and execute arbitrary commands in the system without logging in.
CVE-2021-22850 1 Hgiga 1 Oaklouds Portal 2021-01-22 7.5 HIGH 9.8 CRITICAL
HGiga EIP product lacks ineffective access control in certain pages that allow attackers to access database or perform privileged functions.