cassianetworks Vulnerabilities and Affected Products
Vulnerabilities associated with xc1000_firmware.
Products
Clear product- xc1000_firmware1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2023-31446CRITICAL | Cassia Gateway Firmware XC1000 and XC2000 queueUrl Parameter VulnerabilityIn Cassia Gateway firmware XC1000_2.1.1.2303082218 and XC2000_2.1.1.2303090947, the queueUrl parameter in /bypass/config is not sanitized. This leads to injecting Bash code and executing it with root privileges on device startup. | CVSS9.8v3.1 | EPSS61.1% | PoCs1 | SignalsNot listed in CISA KEVNo known ransomware use1 Nuclei template | STIX |