Vulnerabilidades de Riello

🔔 Criar alerta RSS

CVEs publicadas que afetam produtos de Riello: 3 registro(s), com severidade, exploração e correções.

Somente exploradas (KEV) →

CVE-2025-68916 Alta · 7.2 CWE-22 24/12/2025

Path Traversal em Riello-ups Netman 208

Riello UPS NetMan 208 Application before 1.12 allows cgi-bin/certsupload.cgi /../ directory traversal for file upload with resultant code execution.

CVE-2025-68915 Média · 4.8 CWE-79 24/12/2025

Cross-site Scripting (XSS) em Riello-ups Netman 208

Riello UPS NetMan 208 Application before 1.12 allows cgi-bin/loginbanner_w.cgi XSS via a crafted banner.

CVE-2025-68914 Média · 5.3 CWE-89 24/12/2025

SQL Injection em Riello-ups Netman 208

Riello UPS NetMan 208 Application before 1.12 allows cgi-bin/login.cgi username SQL Injection. For example, an attacker can delete the LOGINFAILEDTABLE table.