Firmware 2.4.2.0 installed on Controller CECC-LK

productDE

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

by severity

4critical6high5medium0low

updated 2026-10-27

vulnerabilities (15)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2017-3735US	medium5.3	21.0% (98th)	—	no fix	2017-08-28	—
CVE-2018-0739US	medium6.5	18.6% (97th)	—	no fix	2018-03-27	—
CVE-2019-13548US	critical9.8	5.81% (93rd)	—	no fix	2019-09-13	—
CVE-2019-13532US	high7.5	3.15% (88th)	—	no fix	2019-09-13	—
CVE-2018-20026US	high7.5	3.04% (87th)	—	no fix	2019-02-19	—
CVE-2018-20025US	high7.5OT elevated	2.56% (85th)	—	no fix	2019-02-19	—
CVE-2019-18858US	critical9.8	1.94% (80th)	—	no fix	2019-11-20	—
CVE-2019-9010US	critical9.8	1.90% (80th)	—	no fix	2019-08-15	—
CVE-2020-7052US	medium6.5	1.88% (79th)	—	no fix	2020-01-24	—
CVE-2019-9008US	high8.8	1.86% (79th)	—	no fix	2019-09-17	—
CVE-2019-9012US	high7.5	1.75% (78th)	—	no fix	2019-08-15	—
CVE-2019-9009US	high7.5	1.70% (77th)	—	no fix	2019-09-17	—
CVE-2019-13542US	medium6.5	1.36% (72nd)	—	no fix	2019-09-17	—
CVE-2018-10612US	critical9.8OT elevated	1.26% (69th)	—	no fix	2019-01-29	—
CVE-2010-5250US	medium6.9	0.44% (38th)	—	no fix	2012-09-07	—

The flaw types (CWEs) most of these CVEs share.

CWE-284Improper Access Control2 CVEs
CWE-732Incorrect Permission Assignment for Critical Resource2 CVEs
CWE-770Allocation of Resources Without Limits or Throttling2 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer1 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')1 CVEs
CWE-121Stack-based Buffer Overflow1 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1 CVEs
CWE-283Unverified Ownership1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.