Endruntechnologies develops the Sonoma D12, a network appliance whose vulnerability profile concentrates around input-handling and access-control weaknesses endemic to web-facing management interfaces, including OS command injection, cross-site scripting, path traversal, and cross-site request forgery. Vulnerabilities affecting this vendor skew toward serious outcomes; defenders should prioritize patches for internet-reachable instances and restrict management access through network segmentation. Live severity, exploitation activity, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Endruntechnologies over time
Signals from CVEs in this vendor scope (12 CVEs).
12 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2025-60957CRITICAL OS Command Injection vulnerability in EndRun Technologies Sonoma D12 Network Time Server (GPS) F/W 6010-0071-000 Ver 4.00 allows attackers to execute arbitrary code, cause a denial | Oct 6, 2025 | 9.9 | 33 | NO | NO |
CVE-2025-60964CRITICAL OS Command Injection vulnerability in EndRun Technologies Sonoma D12 Network Time Server (GPS) F/W 6010-0071-000 Ver 4.00 allows attackers to execute arbitrary code, cause a denial | Oct 6, 2025 | 9.1 | 31 | NO | NO |
CVE-2025-60965CRITICAL OS Command Injection vulnerability in EndRun Technologies Sonoma D12 Network Time Server (GPS) F/W 6010-0071-000 Ver 4.00 allows attackers to execute arbitrary code, cause a denial | Oct 6, 2025 | 9.1 | 30 | NO | NO |
CVE-2025-60963HIGH OS Command Injection vulnerability in EndRun Technologies Sonoma D12 Network Time Server (GPS) F/W 6010-0071-000 Ver 4.00 allows attackers to execute arbitrary code, cause a denial | Oct 6, 2025 | 8.2 | 29 | NO | NO |
CVE-2025-60960HIGH OS Command Injection vulnerability in EndRun Technologies Sonoma D12 Network Time Server (GPS) F/W 6010-0071-000 Ver 4.00 allows attackers to execute arbitrary code, cause a denial | Oct 6, 2025 | 8.2 | 29 | NO | NO |
CVE-2025-60959HIGH OS Command Injection vulnerability in EndRun Technologies Sonoma D12 Network Time Server (GPS) F/W 6010-0071-000 Ver 4.00 allows attackers to gain sensitive information. | Oct 6, 2025 | 8.2 | 29 | NO | NO |
CVE-2025-60962HIGH OS Command Injection vulnerability in EndRun Technologies Sonoma D12 Network Time Server (GPS) F/W 6010-0071-000 Ver 4.00 allows attackers to gain sensitive information, and possib | Oct 6, 2025 | 8.2 | 28 | NO | NO |
CVE-2025-60956HIGH Cross Site Request Forgery (CSRF) vulnerability in EndRun Technologies Sonoma D12 Network Time Server (GPS) F/W 6010-0071-000 Ver 4.00 allows attackers to execute arbitrary code, c | Oct 6, 2025 | 8.0 | 27 | NO | NO |
CVE-2025-60967HIGH Cross Site Scripting (XSS) vulnerability in EndRun Technologies Sonoma D12 Network Time Server (GPS) F/W 6010-0076-000 Ver 4.00 allows attackers to gain sensitive information. | Oct 6, 2025 | 7.3 | 26 | NO | NO |
CVE-2025-60958HIGH Cross Site Scripting (XSS) vulnerability in EndRun Technologies Sonoma D12 Network Time Server (GPS) F/W 6010-0071-000 Ver 4.00 allows attackers to gain sensitive information. | Oct 6, 2025 | 7.3 | 26 | NO | NO |
Signals from CVEs in this vendor scope (12 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Endruntechnologies.
Media articles that mention a CVE ID that affects a product developed by Endruntechnologies — matched by CVE ID, not by vendor name.