Primasystems Flexair vulnerabilities

• primasystems flexair Prima Systems FlexAir devices have an Insufficient Session-ID Length. CVE-2019-7280 8.8 HighJuly 1, 2019
• primasystems flexair Prima Systems FlexAir devices allow Cross-Site Request Forgery (CSRF). CVE-2019-7281 8.8 HighJuly 1, 2019
• primasystems flexair Prima Systems FlexAir devices allow authentication with MD5 hashes directly. CVE-2019-7666 Public exploit EPSS 14.6% 8.8 HighJuly 1, 2019
• primasystems flexair Prima Systems FlexAir devices allow unauthenticated download of the database configuration backup... CVE-2019-7667 9.8 CriticalJuly 1, 2019
• primasystems flexair Prima Systems FlexAir devices have Default Credentials. CVE-2019-7668 9.8 CriticalJuly 1, 2019
• primasystems flexair Prima Systems FlexAir devices allow Unauthenticated Command Injection resulting in Root Remote... CVE-2019-7669 EPSS 30.9% 8.8 HighJuly 1, 2019
• primasystems flexair Prima Systems FlexAir devices allow Authenticated Command Injection resulting in Root Remote Code... CVE-2019-7670 Public exploit EPSS 18.0% 7.2 HighJuly 1, 2019
• primasystems flexair Prima Systems FlexAir devices allow Authenticated Stored XSS. CVE-2019-7671 Public exploit 9.0 CriticalJune 5, 2019
• primasystems flexair Prima Systems FlexAir devices have Hard-coded Credentials. CVE-2019-7672 8.8 HighJune 5, 2019
• primasystems flexair On Prima Systems FlexAir devices through 2.4.9api3, an authenticated user can upload Python (.py)... CVE-2019-9189 Public exploit EPSS 11.4% 8.8 HighJune 5, 2019