Filtered by vendor Ifm Subscriptions
Total 7 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2024-5404 1 Ifm 4 Moneo For Microsoft Windows, Moneo Qha210, Moneo Qha300 and 1 more 2024-11-21 9.8 Critical
An unauthenticated remote attacker can change the admin password in a moneo appliance due to weak password recovery mechanism.
CVE-2024-28751 1 Ifm 2 Smart Plc Ac14xx Firmware, Smart Plc Ac4xxs Firmware 2024-11-21 9.1 Critical
An high privileged remote attacker can enable telnet access that accepts hardcoded credentials. 
CVE-2024-28750 1 Ifm 2 Smart Plc Ac14xx Firmware, Smart Plc Ac4xxs Firmware 2024-11-21 7.2 High
A remote attacker with high privileges may use a deleting file function to inject OS commands.
CVE-2024-28749 1 Ifm 2 Smart Plc Ac14xx Firmware, Smart Plc Ac4xxs Firmware 2024-11-21 7.2 High
A remote attacker with high privileges may use a writing file function to inject OS commands.
CVE-2024-28748 1 Ifm 2 Smart Plc Ac14xx Firmware, Smart Plc Ac4xxs Firmware 2024-11-21 7.2 High
A remote attacker with high privileges may use a reading file function to inject OS commands.
CVE-2024-28747 1 Ifm 2 Smart Plc Ac14xx Firmware, Smart Plc Ac4xxs Firmware 2024-11-21 9.8 Critical
An unauthenticated remote attacker can use the hard-coded credentials to access the SmartSPS devices with high privileges.
CVE-2022-3485 1 Ifm 4 Moneo Qha200, Moneo Qha200 Firmware, Moneo Qha210 and 1 more 2024-11-21 9.8 Critical
In IFM Moneo Appliance with version up to 1.9.3 an unauthenticated remote attacker can reset the administrator password by only supplying the serial number and thus gain full control of the device.