Adremsoft develops NetCrunch, a network monitoring and management platform that sits in operational-technology and IT-infrastructure environments, where its exposure concentrates in web-application and credential-handling attack vectors. The vendor's vulnerability profile skews toward serious outcomes, with a meaningful share reaching critical severity, and recurs through weakness classes including insufficient credential protection, cross-site request forgery, cross-site scripting, OS command injection, and exposure of sensitive information—patterns typical of web-facing administrative tools with embedded scripting and system-interaction capabilities. Defenders deploying NetCrunch should prioritize patching based on severity, restrict administrative access, and monitor for credential compromise; live severity and exploitation figures are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Adremsoft over time
Signals from CVEs in this vendor scope (8 CVEs).
8 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2019-14482CRITICAL AdRem NetCrunch 10.6.0.4587 has a hardcoded SSL private key vulnerability in the NetCrunch web client. The same hardcoded SSL private key is used across different customers' instal | Dec 16, 2020 | 9.8 | 29 | NO | NO |
CVE-2019-14480CRITICAL AdRem NetCrunch 10.6.0.4587 has an Improper Session Handling vulnerability in the NetCrunch web client, which can lead to an authentication bypass or escalation of privileges. | Dec 16, 2020 | 9.8 | 29 | NO | NO |
CVE-2019-14479HIGH AdRem NetCrunch 10.6.0.4587 allows Remote Code Execution. In the NetCrunch web client, a read-only administrator can execute arbitrary code on the server running the NetCrunch serv | Dec 16, 2020 | 8.8 | 28 | NO | NO |
CVE-2019-14483HIGH AdRem NetCrunch 10.6.0.4587 allows Credentials Disclosure. Every user can read the BSD, Linux, MacOS and Solaris private keys, private keys' passwords, and root passwords stored in | Dec 16, 2020 | 8.8 | 27 | NO | NO |
CVE-2019-14476MEDIUM AdRem NetCrunch 10.6.0.4587 has a Server-Side Request Forgery (SSRF) vulnerability in the NetCrunch server. Every user can trick the server into performing SMB requests to other sy | Dec 16, 2020 | 6.5 | 22 | NO | NO |
CVE-2019-14481MEDIUM AdRem NetCrunch 10.6.0.4587 has a Cross-Site Request Forgery (CSRF) vulnerability in the NetCrunch web client. Successful exploitation requires a logged-in user to open a malicious | Dec 16, 2020 | 5.4 | 20 | NO | NO |
CVE-2019-14478MEDIUM AdRem NetCrunch 10.6.0.4587 has a stored Cross-Site Scripting (XSS) vulnerability in the NetCrunch web client. The user's input data is not properly encoded when being echoed back | Dec 16, 2020 | 5.4 | 20 | NO | NO |
CVE-2019-14477MEDIUM AdRem NetCrunch 10.6.0.4587 has Improper Credential Storage since the internal user database is readable by low-privileged users and passwords in the database are weakly encoded or | Dec 16, 2020 | 5.5 | 19 | NO | NO |
Signals from CVEs in this vendor scope (8 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Adremsoft.
Media articles that mention a CVE ID that affects a product developed by Adremsoft — matched by CVE ID, not by vendor name.