critical9.8
CVE-2018-15484
An issue was discovered on KONE Group Controller (KGC) devices before 4.6.5.
Impact
An issue was discovered on KONE Group Controller (KGC) devices before 4.6.5. Unauthenticated Remote Code Execution is possible through the open HTTP interface by modifying autoexec.bat, aka KONE-01.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Kone | Group Controller Firmware | before 4.6.5 |