Vulnerabilities > Riello UPS > Netman 204 Firmware > 02.05
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2024-09-25 | CVE-2024-8877 | SQL Injection vulnerability in Riello-Ups Netman 204 Firmware 02.05 Improper neutralization of special elements results in a SQL Injection vulnerability in Riello Netman 204. | 9.8 |
| 2024-09-25 | CVE-2024-8878 | Weak Password Recovery Mechanism for Forgotten Password vulnerability in Riello-Ups Netman 204 Firmware 02.05 The password recovery mechanism for the forgotten password in Riello Netman 204 allows an attacker to reset the admin password and take over control of the device.This issue affects Netman 204: through 4.05. | 9.8 |
| 2023-06-21 | CVE-2022-3372 | Cross-Site Request Forgery (CSRF) vulnerability in Riello-Ups Netman 204 Firmware 02.05 There is a CSRF vulnerability on Netman-204 version 02.05. | 8.8 |