Softing Uagate Si Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Softing Uagate Si Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2019-11526 — CVSS 9.8 (critical): An issue was discovered in Softing uaGate SI 1.60.01. A maintenance script, that is executable via sudo, is vulnerable to file path…
• CVE-2019-11527 — CVSS 8.8 (high): An issue was discovered in Softing uaGate SI 1.60.01. A CGI script is vulnerable to command injection with a maliciously crafted url…
• CVE-2019-15051 — CVSS 8.8 (high): An issue was discovered in Softing uaGate (SI, MB, 840D) firmware through 1.71.00.1225. A CGI script is vulnerable to command injection via…
• CVE-2019-11528 — CVSS 7.5 (high): An issue was discovered in Softing uaGate SI 1.60.01. A system default path for executables is user writable.