Skip to content

Vendor

Caton vulnerabilities

3 published CVES affecting Caton, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
3
Critical
3
High
0
Medium
0
Low
0
Unscored
0
CISA KEV
0
Atom feed of Caton alerts

Products

Latest Caton CVEs

Newest publication first

  1. CVE-2023-2682 Caton Live Mini_HTTPD ping.cgi command injection

    Published
    CriticalCVSS 9.8 EPSS 1.9%

    A vulnerability was found in Caton Live up to 2023-04-26 and classified as critical. This issue affects some unknown processing of the file /cgi-bin/ping.cgi of the component Mini_HTTPD. The manipulation of the argument address with the input ;id;uname${IFS}-a leads to command in...

  2. CVE-2023-2520 Caton Prime Ping command injection

    Published
    CriticalCVSS 9.8 EPSS 2.5%

    A vulnerability was found in Caton Prime 2.1.2.51.e8d7225049(202303031001) and classified as critical. This issue affects some unknown processing of the file cgi-bin/tools_ping.cgi?action=Command of the component Ping Handler. The manipulation of the argument Destination leads to...

  3. CVE-2023-2519 Caton CTP Relay Server API login sql injection

    Published
    CriticalCVSS 9.8 EPSS 0.62%

    A vulnerability has been found in Caton CTP Relay Server 1.2.9 and classified as critical. This vulnerability affects unknown code of the file /server/api/v1/login of the component API. The manipulation of the argument username/password leads to sql injection. The attack can be i...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.