Skip to main content

CVE mentions, exploit signals, and PoC evidence in one fast public view.

Vendor/product archive

northern.tech / mender CVEs

Beta · best-effort

5 CVEs tagged to northern.tech / mender — 1 Critical, 2 High, 2 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to northern.tech vendor archive

CVE-2024-46948

Published Nov 8, 2024

Northern.tech Mender before 3.6.5 and 3.7.x before 3.7.5 has Incorrect Access Control.

CVSS 4.3 · Medium

Vendor/product tagsBeta · best-effort

CVE-2022-32290

Published Jul 6, 2022

The client in Northern.tech Mender 3.2.0, 3.2.1, and 3.2.2 has Incorrect Access Control. It listens on a random, unprivileged TCP port and exposes an HTTP proxy to facilitate API…

CVSS 4.3 · Medium

Vendor/product tagsBeta · best-effort

CVE-2022-29556

Published Apr 28, 2022

The iot-manager microservice 1.0.0 in Northern.tech Mender Enterprise before 3.2.2 allows SSRF because the Azure IoT Hub integration provides several SSRF primitives that can exec…

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

CVE-2022-29555

Published Apr 28, 2022

The Deviceconnect microservice through 1.3.0 in Northern.tech Mender Enterprise before 3.2.2. allows Cross-Origin Websocket Hijacking.

CVSS 8.8 · High

Vendor/product tagsBeta · best-effort

CVE-2021-35342

Published Aug 27, 2021

The useradm service 1.14.0 (in Northern.tech Mender Enterprise 2.7.x before 2.7.1) and 1.13.0 (in Northern.tech Mender Enterprise 2.6.x before 2.6.1) allows users to access the sy…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

Showing 1-5 of 5 CVEsPage 1 of 1