本ページは kone group_controller_firmware に影響する公開済み CVE（NVD の CPE 経由で関連付け）を列挙します。各行に深刻度指標・概要・公開日が含まれます。
| CVE | 概要 | ソース | CVSS 最大値 | EPSS（%） | 公開 | 更新 |
|---|---|---|---|---|---|---|
| CVE-2018-15486 | An issue was discovered on KONE Group Controller (KGC) devices before 4.6.5. Unauthenticated Local File Inclusion and File modification is possible through the open HTTP interface by modifying the name parameter of the file endpoint, aka KONE-02. | [email protected] | 9.1 | 0.27% | 2018-09-07 | 2024-11-21 |
| CVE-2018-15485 | An issue was discovered on KONE Group Controller (KGC) devices before 4.6.5. FTP does not require authentication or authorization, aka KONE-03. | [email protected] | 9.1 | 1.13% | 2018-09-07 | 2024-11-21 |
| CVE-2018-15484 | An issue was discovered on KONE Group Controller (KGC) devices before 4.6.5. Unauthenticated Remote Code Execution is possible through the open HTTP interface by modifying autoexec.bat, aka KONE-01. | [email protected] | 9.8 | 6.05% | 2018-09-07 | 2024-11-21 |
| CVE-2018-15483 | An issue was discovered on KONE Group Controller (KGC) devices before 4.6.5. Denial of Service can occur through the open HTTP interface, aka KONE-04. | [email protected] | 7.5 | 0.35% | 2018-09-07 | 2024-11-21 |