CVE Feed

    Dashboard / CVE / CVE-2024-55544

    CVE-2024-55544

    Missing input validation in the ORing IAP-420 web-interface allows authenticated Command Injections on OS level.This issue affects IAP-420 version 2.01e and below.

    Published:Dec 10, 2024
    Last Modified:Nov 3, 2025
    EPS:Dec 10, 2024
    EPSS Score:0.04722
    CVSS Score:8.8

    Affected Products

    Vendor
    Oringnet
    Product
    Iap-420
    Vendor
    Oringnet
    Product
    Iap-420 Firmware

    Exploits

    https://cyberdanube.com/security-research/st-polten-uas-multiple-vulnerabilities-in-oring-iap/https://cyberdanube.com/security-research/st-polten-uas-multiple-vulnerabilities-in-oring-iap/

    Related CVEs

    CVE-2024-55548 (CVSS 6.9) — Improper check of password character lenght in ORing IAP-420 allows a forced deadlock. This issue affects IAP-…
    CVE-2024-55547 (CVSS 9.3) — SNMP objects in NET-SNMP used in ORing IAP-420 allows Command Injection. This issue affects IAP-420: through 2…
    CVE-2024-55546 (CVSS 7.1) — Missing input validation in the ORing IAP-420 web-interface allows stored Cross-Site Scripting (XSS).This issu…
    CVE-2024-55545 (CVSS 7.1) — Missing input validation in the ORing IAP-420 web-interface allows Cross-Site Scripting (XSS).This issue affec…
    CVE-2024-5411 (CVSS 8.7) — Missing input validation and OS command integration of the input in the ORing IAP-420 web-interface allows aut…
    CVE-2024-5410 (CVSS 8.3) — Missing input validation in the ORing IAP-420 web-interface allows stored Cross-Site Scripting (XSS).This issu…
    CVE-2022-3203 (CVSS 9.8) — On ORing net IAP-420(+) with FW version 2.0m a telnet server is enabled by default and cannot permanently be d…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High