Skip to content
OpenAdvisories

Product · JCT

Airpointer

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.6
    CVE-2025-4635

    Remote Code Execution

    A malicious user with administrative privileges in the web portal would be able to manipulate the Diagnostics module to obtain remote code execution on the local device as a low privileged user.

    JCT Airpointer
  • Medium 4.1
    CVE-2025-4634

    Local File Inclusion

    The web portal on airpointer 2.4.107-2 was vulnerable local file inclusion. A malicious user with administrative privileges in the web portal would be able to manipulate requests to view files on the filesystem

    JCT Airpointer
  • Medium 6.5
    CVE-2025-4633

    Default Credentials

    Default credentials were present in the web portal for Airpointer 2.4.107-2, allowing an unauthenticated malicious actor to log in via the web portal

    JCT Airpointer