loftware vulnerabilities

Products

• spectrum 8

Latest loftware CVEs

Newest publication first

1. CVE-2023-37230 Loftware Spectrum (testDeviceConnection) before 5.1 allows SSRF.

   Published 2024-09-10

   High·CVSS 8.8

   Loftware Spectrum (testDeviceConnection) before 5.1 allows SSRF.

2. CVE-2023-37226 Loftware Spectrum before 4.6 HF14 has Missing Authentication for a Critical Function.

   Published 2024-09-10

   Critical·CVSS 9.8

   Loftware Spectrum before 4.6 HF14 has Missing Authentication for a Critical Function.

3. CVE-2023-37231 Loftware Spectrum before 4.6 HF14 uses a Hard-coded Password.

   Published 2024-09-10

   Critical·CVSS 9.8

   Loftware Spectrum before 4.6 HF14 uses a Hard-coded Password.

4. CVE-2023-37229 Loftware Spectrum before 5.1 allows SSRF.

   Published 2024-09-10

   High·CVSS 8.8

   Loftware Spectrum before 5.1 allows SSRF.

5. CVE-2023-37232 Loftware Spectrum through 4.6 exposes Sensitive Information (Logs) to an Unauthorized Actor.

   Published 2024-09-10

   High·CVSS 7.5

   Loftware Spectrum through 4.6 exposes Sensitive Information (Logs) to an Unauthorized Actor.

6. CVE-2023-37234 Loftware Spectrum through 4.6 has unprotected JMX Registry.

   Published 2024-09-10

   Critical·CVSS 9.8

   Loftware Spectrum through 4.6 has unprotected JMX Registry.

7. CVE-2023-37233 Loftware Spectrum before 4.6 HF14 allows authenticated XXE attacks.

   Published 2024-09-10

   High·CVSS 8.8

   Loftware Spectrum before 4.6 HF14 allows authenticated XXE attacks.

8. CVE-2023-37227 Loftware Spectrum before 4.6 HF13 Deserializes Untrusted Data.

   Published 2024-09-10

   Critical·CVSS 9.8

   Loftware Spectrum before 4.6 HF13 Deserializes Untrusted Data.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.