Kone Security Vulnerabilities
An issue was discovered on KONE Group Controller (KGC) devices before 4.6.5. Unauthenticated Remote Code Execution is possible through the open HTTP interface by modifying autoexec.bat, aka...
9.8CVSS
9.6AI Score
0.025EPSS
An issue was discovered on KONE Group Controller (KGC) devices before 4.6.5. FTP does not require authentication or authorization, aka...
9.1CVSS
9.3AI Score
0.001EPSS
An issue was discovered on KONE Group Controller (KGC) devices before 4.6.5. Unauthenticated Local File Inclusion and File modification is possible through the open HTTP interface by modifying the name parameter of the file endpoint, aka...
9.1CVSS
9.2AI Score
0.004EPSS
An issue was discovered on KONE Group Controller (KGC) devices before 4.6.5. Denial of Service can occur through the open HTTP interface, aka...
7.5CVSS
7.5AI Score
0.001EPSS