Sunos
Vendor:
First CVE: Oct 16, 2013 · Active for 12 years
18
Total CVEs
More Total CVEs than 93% of tracked products
9.0
Avg CVEs / Year
Higher CVE frequency than 95% of tracked products
4.1
Avg CVSS
Higher Avg CVSS than 2% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Sunos over time
Volume of CVEsAvg CVSS Base Score
First CVE
Oct 16, 2013
12 years ago
Most Recent CVE
Jul 17, 2014
4,392 days ago
CVE Severity & Scoring
Sunos18 CVEs
22%
78%
All CVEs352,713 CVEs
45%
40%
11%
LowMedium
Attack Vector
Local0 (0.0%)
Network0 (0.0%)
Unknown18 (100.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low0 (0.0%)
High0 (0.0%)
Unknown18 (100.0%)
User Interaction
None0 (0.0%)
Unknown18 (100.0%)
Required0 (0.0%)
Privileges Required
Low0 (0.0%)
High0 (0.0%)
None0 (0.0%)
Unknown18 (100.0%)
Top CVEs
Signals from CVEs in this product scope (18 CVEs).
18 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2013-5866MEDIUM Unspecified vulnerability in Oracle Solaris 11.1 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Kernel. | Oct 16, 2013 | 5.2 | 19 | NO | NO |
CVE-2013-5864MEDIUM Unspecified vulnerability in Oracle Solaris 10 and 11.1 allows local users to affect availability via vectors related to USB hub driver. | Oct 16, 2013 | 4.9 | 18 | NO | NO |
CVE-2013-5862MEDIUM Unspecified vulnerability in Oracle Solaris 10 and 11.1 allows local users to affect availability via vectors related to CPU performance counters (CPC) drivers, a different vulnera | Oct 16, 2013 | 4.9 | 18 | NO | NO |
CVE-2014-0442MEDIUM Unspecified vulnerability in Oracle Solaris 9, 10, and 11.1 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Print Filter Ut | Apr 16, 2014 | 4.6 | 17 | NO | NO |
CVE-2013-5876MEDIUM Unspecified vulnerability in Oracle Solaris 10 and 11.1 allows local users to affect availability via unknown vectors related to Kernel, a different vulnerability than CVE-2014-044 | Jan 15, 2014 | 4.9 | 17 | NO | NO |
CVE-2013-5821MEDIUM Unspecified vulnerability in Oracle Solaris 8, 9, 10, and 11.1 allows local users to affect confidentiality, integrity, and availability via vectors related to RPC. | Jan 15, 2014 | 4.6 | 17 | NO | NO |
CVE-2013-5863MEDIUM Unspecified vulnerability in Oracle Solaris 11.1 allows remote attackers to affect integrity via vectors related to IPS repository daemon. | Oct 16, 2013 | 4.3 | 17 | NO | NO |
CVE-2014-4224MEDIUM Unspecified vulnerability in Oracle Sun Solaris 8, 9, 10, and 11.1 allows local users to affect availability via unknown vectors related to sockfs. | Jul 17, 2014 | 4.9 | 15 | NO | NO |
CVE-2014-4215MEDIUM Unspecified vulnerability in Oracle Solaris 10 and 11.1 allows local users to affect availability via vectors related to CPU performance counters (CPC) drivers, a different vulnera | Jul 17, 2014 | 4.9 | 15 | NO | NO |
CVE-2014-2469MEDIUM Unspecified vulnerability in lighttpd in Oracle Solaris 11.1 allows attackers to cause a denial of service via unknown vectors. | Apr 17, 2014 | 5.0 | 15 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (18 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (18 CVEs).
Media Mentions
Signals from CVEs in this product scope (18 CVEs).
Top CNAs Publishing CVEs For Sunos
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 5.11.1 | 18 | 4.1 | 0.8% | 0 | 0 |