HGiga Vulnerabilities and Affected Products
Vulnerabilities associated with OAKlouds OAKSv2.
Products
Clear product- iSherlock 4.59 vulnerabilities
- iSherlock 5.59 vulnerabilities
- MailSherlock MSR45/SSR458 vulnerabilities
- isherlock6 vulnerabilities
- MailSherlock4 vulnerabilities
- OAKlouds4 vulnerabilities
- PowerStation3 vulnerabilities
- C&Cm@il package olln-base2 vulnerabilities
- C&Cmail2 vulnerabilities
- OAKlouds OAKSv22 vulnerabilities
- OAKlouds OAKSv32 vulnerabilities
- C&Cm@il1 vulnerability
- C&Cm@il package olln-base1 vulnerability
- iSherlock-audit-4.51 vulnerability
- iSherlock-audit-5.51 vulnerability
- iSherlock-base-4.51 vulnerability
- iSherlock-base-5.51 vulnerability
- iSherlock-maillog-4.51 vulnerability
- iSherlock-maillog-5.51 vulnerability
- iSherlock-smtp-4.51 vulnerability
- iSherlock-smtp-5.51 vulnerability
- oaklouds-organization1 vulnerability
- oaklouds-webbase1 vulnerability
- OAKSv20 OAKlouds-document_v31 vulnerability
- OAKSv20 OAKlouds-document_v3 2.01 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2021-37913CRITICAL | HGiga OAKlouds - Command Injection-2The HGiga OAKlouds mobile portal does not filter special characters of the IPv6 Gateway parameter of the network interface card setting page. Remote attackers can use this vulnerability to perform command injection and execute arbitrary commands in the system without logging in. CWE-78Sep 15, 2021 | CVSS9.8v3.1 | EPSS2.83% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2021-37912CRITICAL | HGiga OAKlouds - Command Injection-1The HGiga OAKlouds mobile portal does not filter special characters of the Ethernet number parameter of the network interface card setting page. Remote attackers can use this vulnerability to perform command injection and execute arbitrary commands in the system without logging in. CWE-78Sep 15, 2021 | CVSS9.8v3.1 | EPSS2.83% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |