Skip to content
OpenAdvisories

Vendor

Cypress

2 known vulnerabilities.

Products

ONE 1 200 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.8
    CVE-2021-47745

    Cypress Solutions CTM-200 2.7.1 Root Remote OS Command Injection via Firmware Upgrade

    Cypress Solutions CTM-200 2.7.1 contains an authenticated command injection vulnerability in the firmware upgrade script that allows remote attackers to execute shell commands. Attackers can exploit the 'fw_url' parameter in the ctm-config-upgrade.sh script t…

    Cypress 200
  • High 7.5
    CVE-2021-47744

    Cypress Solutions CTM-200/CTM-ONE 1.3.6 Hard-coded Credentials Remote Root

    Cypress Solutions CTM-200/CTM-ONE 1.3.6 contains hard-coded credentials vulnerability in Linux distribution that exposes root access. Attackers can exploit the static 'Chameleon' password to gain remote root access via Telnet or SSH on affected devices.

    Cypress ONE