Back to Database
Status published
Critical
CVE-2018-1000626
Battelle V2I Hub 2.5.1 could allow a remote attacker to...
Vulnerability Description
Battelle V2I Hub 2.5.1 could allow a remote attacker to bypass security restrictions, caused by the lack of requirement to change the default API key. An attacker could exploit this vulnerability using all available API functions containing an unchanged API key to gain unauthorized access to the system.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2018-1000626
Credits & Attribution
No credits recorded in the NVD database.
More from battelle
View All →CVE-2018-1000631
Battelle V2I Hub 3.0 is vulnerable to SQL injection. A...
Critical
9.8
CVE-2018-1000630
Battelle V2I Hub 2.5.1 is vulnerable to SQL injection. A...
High
7.2
CVE-2018-1000629
Battelle V2I Hub 2.5.1 is vulnerable to cross-site scripting, caused...
Medium
6.1
CVE-2018-1000628
Battelle V2I Hub 2.5.1 could allow a remote attacker to...
Critical
9.8
CVE-2018-1000627
Battelle V2I Hub 2.5.1 could allow a remote attacker to...
Critical
9.8
Affected Vendor
battelle
View all reports →Affected Software
v2i hub
Vulnerable Versions:
2.5.1
Timeline
Official Publish:
December 28th, 2018
Last Modified:
August 5th, 2024
Added to House:
July 20th, 2026
CVSS Vectors
V3:
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.