Elitecore : Security Vulnerabilities, CVEs, CVSS score >= 3
The default configuration of Cyberoam UTM appliances uses the same Certification Authority certificate and same private key across different customers' installations, which makes it easier for man-in-the-middle attackers to spoof SSL servers by leveraging the presence of the Cyberoam_SSL_CA certificate in a list of trusted root certification authorities. NOTE: the vendor disputes the significance of this issue because the appliance "does not allow import or export of the foresaid private key.
Max CVSS
5.8
EPSS Score
0.09%
Published
2012-07-09
Updated
2024-04-11
SQL injection vulnerability in corporate/Controller in Elitecore Technologies Cyberoam UTM before 10.01.2 build 059 allows remote authenticated administrators to execute arbitrary SQL commands via the tableid parameter. NOTE: some of these details are obtained from third party information.
Max CVSS
6.0
EPSS Score
0.07%
Published
2012-01-04
Updated
2017-08-29
2 vulnerabilities found