CVE-2018-15484 An issue was discovered on KONE Group Controller (KGC) devices before 4.6.5. Unauthenticated Remote Code Execution is possible through the open HTTP interface by modifying autoexec.bat, aka KONE-01.
CriticalCVSS 9.8
EPSS 7.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
An issue was discovered on KONE Group Controller (KGC) devices before 4.6.5. Unauthenticated Remote Code Execution is possible through the open HTTP interface by modifying autoexec.bat, aka KONE-01.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| kone group controller firmware | < 4.6.5 | 4.6.5 |
References
- packetstormsecurity.com third-party-advisory vdb-entry
- www.kone.com vendor-advisory