Skip to content
OpenAdvisories

Vendor

Riello UPS

6 known vulnerabilities.

Products

NetMan 204 6
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.1
    CVE-2022-47891

    Admin password reset in NetMan 204

    All versions of NetMan 204 allow an attacker that knows the MAC and serial number of the device to reset the administrator password via the legitimate recovery function.

    Riello UPS NetMan 204
  • High 8.8
    CVE-2022-3372

    Cross-Site Request Forgery (CSRF) in Riello UPS Netman-204

    There is a CSRF vulnerability on Netman-204 version 02.05. An attacker could manage to change administrator passwords through a Cross Site Request Forgery due to the lack of proper validation on the CRSF token. This vulnerability could allow a remote attacker…

    Riello UPS NetMan 204