Skip to content

Vendor

ricon vulnerabilities

2 published CVES affecting ricon, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
1
High
1
Medium
0
Low
0
Unscored
0
CISA KEV
1
Atom feed of ricon alerts

Products

Latest ricon CVEs

Newest publication first

  1. CVE-2022-0365 Ricon Mobile, Inc.

    Published
    CriticalCVSS 9.8 EPSS 2.2%

    The affected product is vulnerable to an authenticated OS command injection, which may allow an attacker to inject and execute arbitrary shell commands as the Admin (root) user.

  2. CVE-2014-0160 The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information from process m...

    Published
    HighCVSS 7.5 EPSS 100.0% CISA KEV added 2022-05-04 Exploited in the wild Framework module Public exploit PoC

    The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information from process memory via crafted packets that trigger a buffer over-read, as demonstrated by re...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.