Vulnerabilities in ST Engineering iDirect

6 results

Vexday analysis

ST Engineering iDirect apresenta uma pegada reduzida de segurança com apenas 2 CVEs catalogados, ambos recentes (últimos 90 dias) e sem exploração ativa conhecida. A ausência de vulnerabilidades críticas e o padrão dominante de falhas de autenticação (CWE-306) indicam risco moderado, mas a concentração de descobertas recentes recomenda monitoramento atento de patches disponibilizados pela fornecedora.

CVE-2026-38059HIGHST Engineering iDirect iQ-Series Terminals Missing authentication for critical functionEPSS 0.6%CVE-2026-38058HIGHST Engineering iDirect iQ-Series Terminals Exposure of Sensitive System Information to an Unauthorized Control SphereEPSS 0.3%CVE-2026-94216MEDIUMST Engineering iDirect Evolution/Velocity WebServer Evolution HTTP Header webserver authorize redirectEPSS 0.3%CVE-2026-94214MEDIUMST Engineering iDirect Evolution/Velocity WebServer Evolution Management Service login.html redirectEPSS 0.3%CVE-2026-38057HIGHST Engineering iDirect iQ-Series Terminals Cross-Site request forgeryEPSS 0.3%CVE-2026-38056CRITICALST Engineering iDirect iQ-Series Terminals Missing AuthorizationEPSS 0.1%