本页列出影响 kone group_controller_firmware 的已公开 CVE 漏洞（通过 NVD CPE 关联）。每行包含严重程度评分、摘要与发布日期，便于识别与分析安全问题。
| CVE | 摘要 | 来源 | 最高 CVSS | EPSS % | 公开时间 | 更新时间 |
|---|---|---|---|---|---|---|
| CVE-2018-15486 | An issue was discovered on KONE Group Controller (KGC) devices before 4.6.5. Unauthenticated Local File Inclusion and File modification is possible through the open HTTP interface by modifying the name parameter of the file endpoint, aka KONE-02. | [email protected] | 9.1 | 2.06% | 2018-09-07 | 2026-06-16 |
| CVE-2018-15485 | An issue was discovered on KONE Group Controller (KGC) devices before 4.6.5. FTP does not require authentication or authorization, aka KONE-03. | [email protected] | 9.1 | 2.50% | 2018-09-07 | 2026-06-16 |
| CVE-2018-15484 | An issue was discovered on KONE Group Controller (KGC) devices before 4.6.5. Unauthenticated Remote Code Execution is possible through the open HTTP interface by modifying autoexec.bat, aka KONE-01. | [email protected] | 9.8 | 7.66% | 2018-09-07 | 2026-06-16 |
| CVE-2018-15483 | An issue was discovered on KONE Group Controller (KGC) devices before 4.6.5. Denial of Service can occur through the open HTTP interface, aka KONE-04. | [email protected] | 7.5 | 1.87% | 2018-09-07 | 2026-06-16 |