Loytec Lgate-902 Firmware vulnerabilities

3 CVEs affecting Loytec Lgate-902 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-14918, published 2019-06-28.

More from Loytec.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2018-14918, published 2019-06-28. High severity, CVSS 7.5. EPSS: 18.6% chance of exploitation in the next 30 days. LOYTEC LGATE-902 6.3.2 devices allow Directory Traversal.
• CVE-2018-14916, published 2019-06-28. Critical severity, CVSS 9.1. EPSS: 17.2% chance of exploitation in the next 30 days. LOYTEC LGATE-902 6.3.2 devices allow Arbitrary file deletion.
• CVE-2018-14919, published 2019-06-28. Medium severity, CVSS 6.1. EPSS: 1.5% chance of exploitation in the next 30 days. LOYTEC LGATE-902 6.3.2 devices allow XSS.