Cyberoam Unified Threat Management vulnerabilities

Product

Cyberoam Unified Threat Management

by Elitecore · last CVE Jul 9, 2012

CVEs

On KEV

7.4

Max CVSS

New 30D

Severity mix

Critical 0High 1Medium 0Low 0

Severity

Exploitation

Watch

Add Cyberoam Unified Threat Management to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2012-3372	7.4	1%	Jul 9	The default configuration of Cyberoam UTM appliances uses the same Certification Authority certificate and same private key across different customers' installations, which makes… Affected: All versions, or not specified
CVE-2011-5050	–	1%	Jan 4	SQL injection vulnerability in corporate/Controller in Elitecore Technologies Cyberoam UTM before 10.01.2 build 059 allows remote authenticated administrators to execute arbitrary… Affected: through 10.01.0; 10.00; 10.01; cr300i; cr500i