WaratekVRT Sign in
Reset
More filters (1)
Columns
Including CVEs outside Waratek scope✕Product diagnostics✕
Overview 7 matches · 0 in Waratek scope · 0 protected · 5 CISA KEV · 4 public PoC · 1 EPSS ≥ 0.5
7matches 0in Waratek scope0.0% 0protected0.0% 5CISA KEV71.4% 4public PoC57.1% 1EPSS ≥ 0.514.3%
Protected by Waratek 0 0.0% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 0 0.0% Outside Waratek scope 0 0.0% Not applicable 7 100.0% Withdrawn CVE 0 0.0%
Critical 1 14.3% High 6 85.7% Medium 0 0.0% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 0 0.0% partly blocked 0 0.0% not blocked 7 100.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 7 100.0% Working exploit published 0 0.0% Proof of concept only 0 0.0% Forecast only 0 0.0% No public exploit 0 0.0%
split by peak 4 / year
Not applicable: 7 High: 6Critical: 1 not blocked: 7 Exploited: 7
20151 Not applicable1 High1 not blocked1 Exploited1 20160 20171 Not applicable1 High1 not blocked1 Exploited1 20180 20190 20200 20214 Not applicable4 Critical1 High3 not blocked4 Exploited4 20220 20231 Not applicable1 High1 not blocked1 Exploited1
201520162017201820192020202120222023
7 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2022-3699 High 2023-10-25 Not applicable Exploited A privilege escalation vulnerability was reported in the Lenovo HardwareScanPlugin prior to version 1.3.1.2 and Lenovo Diagnostics prior to version 4.45 that could allow a local user to execute code with elevated privileges.
CVE-2021-38649 High 2021-09-15 Not applicable Exploited Open Management Infrastructure Elevation of Privilege Vulnerability
CVE-2021-38648 High 2021-09-15 Not applicable Exploited Open Management Infrastructure Elevation of Privilege Vulnerability
CVE-2021-38647 Critical 2021-09-15 Not applicable Exploited Open Management Infrastructure (OMI) Remote Code Execution Vulnerability
CVE-2021-38645 High 2021-09-15 Not applicable Exploited Open Management Infrastructure Elevation of Privilege Vulnerability
CVE-2015-2291 High 2017-08-09 Not applicable Exploited (1) IQVW32.sys before 1.3.1.0 and (2) IQVW64.sys before 1.3.1.0 in the Intel Ethernet diagnostics driver for Windows allows local users to cause a denial of service or possibly execute arbitrary code with kernel privileges via a crafted (a) 0x80862013, (b) 0x8086200B, (c) 0x8086200F, or (d) 0x80862007 IOCTL call.
CVE-2015-4051 High 2015-06-08 Not applicable Exploited Beckhoff IPC Diagnostics before 1.8 does not properly restrict access to functions in /config, which allows remote attackers to cause a denial of service (reboot or shutdown), create arbitrary users, or possibly have unspecified other impact via a crafted request, as demonstrated by a beckhoff.com:service:cxconfig:1#Write SOAP action to /upnpisapi.