Every CVE whose affected-product data names Cellopoint Cellos, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.
CVEs (3)
CVE-2020-17385 — CVSS 7.5 (high): Cellopoint CelloOS v4.1.10 Build 20190922 does not validate URL inputted properly, which allows unauthorized user to launch Path Traversal…
CVE-2020-17384 — CVSS 7.2 (high): Cellopoint CelloOS v4.1.10 Build 20190922 does not validate URL inputted properly. With the cookie of the system administrator, attackers…
CVE-2020-17386 — CVSS 6.5 (medium): Cellopoint CelloOS v4.1.10 Build 20190922 does not validate URL inputted properly. With cookie of an authenticated user, attackers can…