Skip to content
OpenAdvisories
High ICSA-20-177-01 4 CVEs

ENTTEC Lighting Controllers (Update A)

Published Jun 25, 2020 · Updated Sep 15, 2020 · Revision 2

Vendor: ENTTEC Product: Datagate MK2 Product: E-Streamer Mk2 (End of Life) Product: Pixelator Product: Storm 24

Summary

Successful exploitation of these vulnerabilities could allow an attacker to gain unauthorized SSH/SCP access to devices, inject malicious code, run commands with root privileges, and read, write, and execute files in system directories as any user.

Vulnerabilities 4

  • Unscored —
    CVE-2019-12774

    A number of stored XSS vulnerabilities have been identified in the web configuration feature in ENTTEC Datagate Mk2 700…

  • Unscored —
    CVE-2019-12775

    An issue was discovered on the ENTTEC Datagate MK2, Storm 24, Pixelator, and E-Streamer MK2 with firmware 70044_update_…

  • Unscored —
    CVE-2019-12776

    An issue was discovered on the ENTTEC Datagate MK2, Storm 24, Pixelator, and E-Streamer MK2 with firmware 70044_update_…

  • Unscored —
    CVE-2019-12777

    An issue was discovered on the ENTTEC Datagate MK2, Storm 24, Pixelator, and E-Streamer MK2 with firmware 70044_update_…

Revision history

  1. #2

    ICSA-20-177-01 ENTTEC Lighting Controllers (Update A)

  2. #1

    ICSA-20-177-01 ENTTEC Lighting Controllers

References