Byzoro

Records35All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical14CVSS 9.0–10.0

CVSS high12CVSS 7.0–8.9

Exploited now

Byzoro records in CISA KEV

No Byzoro vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Smart S45f Firmware 9 records HIGH Smart S210 Firmware 4 records HIGH Smart S85f Firmware 4 records HIGH Smart S150 Firmware 3 records HIGH Smart S85f 3 records HIGH Smart S20 Firmware 2 records HIGH Smart S85f Management Platform 2 records MEDIUM Patrolflow-am-2530pro Firmware 1 record LOW

Records

35 records

TI-2024-00275 CVE-2024-0300 · GHSA-3j29-j9r5-2r42

Byzoro Smart S150 Management Platform HTTP POST Request userattestation.php unrestricted upload

HIGH 82

A vulnerability was found in Byzoro Smart S150 Management Platform up to 20240101.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.05703 Published 2024-01-08 No fix listed CWE-434

TI-2024-00654 CVE-2024-0712 · GHSA-3cqp-gxcm-89f4

Byzoro Smart S150 Management Platform userattea.php access control

HIGH 81

A vulnerability was found in Byzoro Smart S150 Management Platform V31R02B15.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03896 Published 2024-01-19 No fix listed CWE-284

TI-2023-03816 CVE-2023-4120 · GHSA-jvmm-xwpf-wmm2

Byzoro Smart S85F Management Platform importhtml.php command injection

HIGH 77

A vulnerability was found in Byzoro Smart S85F Management Platform up to 20230722 and classified as critical.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.62332 Published 2023-08-03 No fix listed CWE-77

TI-2024-00866 CVE-2024-0939 · GHSA-pxvc-5jrx-h52p

Byzoro Smart S210 Management Platform uploadfile.php unrestricted upload

HIGH 75

A vulnerability has been found in Byzoro Smart S210 Management Platform up to 20240117 and classified as critical.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.43777 Published 2024-01-26 No fix listed CWE-434

TI-2023-06435 CVE-2023-7039 · GHSA-7674-425x-p4qw

Byzoro S210 importexport.php injection

HIGH 75

A vulnerability classified as critical has been found in Byzoro S210 up to 20231210.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.14225 Published 2023-12-21 No fix listed CWE-74

TI-2023-05227 CVE-2023-5684 · GHSA-229m-w66g-mjph

Byzoro Smart S85F Management Platform importexport.php os command injection

HIGH 75

A vulnerability was found in Byzoro Smart S85F Management Platform up to 20231012.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.26556 Published 2023-10-21 No fix listed CWE-78

TI-2023-04487 CVE-2023-4873 · GHSA-qmrr-rfcw-67r3

Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform importexport.php os command injection

HIGH 75

A vulnerability, which was classified as critical, was found in Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform up to 20230906.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.22132 Published 2023-09-10 No fix listed CWE-78

TI-2023-04367 CVE-2023-4739 · GHSA-3pj2-53jv-g287

Byzoro Smart S85F Management Platform updateos.php unrestricted upload

HIGH 75

A vulnerability, which was classified as critical, has been found in Byzoro Smart S85F Management Platform up to 20230820.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03586 Published 2023-09-03 No fix listed CWE-434

TI-2023-05056 CVE-2023-5491 · GHSA-mg88-vr9f-rg8p

Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform updatelib.php unrestricted upload

HIGH 71

A vulnerability, which was classified as critical, has been found in Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform up to 20230928.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01967 Published 2023-10-10 No fix listed CWE-434

TI-2023-05054 CVE-2023-5489 · GHSA-w4qc-wgxq-8xrm

Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform uploadfile.php unrestricted upload

HIGH 71

A vulnerability classified as critical has been found in Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform up to 20230928.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01967 Published 2023-10-10 No fix listed CWE-434

TI-2024-01168 CVE-2024-1254 · GHSA-365x-5gg7-66qg

Byzoro Smart S20 Management Platform sysmanageajax.php sql injection

HIGH 65

A vulnerability, which was classified as critical, was found in Byzoro Smart S20 Management Platform up to 20231120.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.04612 Published 2024-02-06 No fix listed CWE-89

TI-2024-01167 CVE-2024-1253 · GHSA-33cc-g737-2r5g

Byzoro Smart S40 Management Platform Import web.php unrestricted upload

HIGH 65

A vulnerability, which was classified as critical, has been found in Byzoro Smart S40 Management Platform up to 20240126.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01696 Published 2024-02-06 No fix listed CWE-434

TI-2024-03130 CVE-2024-3346 · GHSA-hhf4-hp7g-q328

Byzoro Smart S80 webmailattach.php os command injection

MEDIUM 61

A vulnerability was found in Byzoro Smart S80 up to 20240328.

CVSS 3.1MEDIUM 6.3 Network Low privileges No interaction EPSS 0.49327 Published 2024-04-05 No fix listed CWE-78

TI-2024-04560 CVE-2024-4904 · GHSA-vw9f-rq55-739q

Byzoro Smart S200 Management Platform userattestation.php unrestricted upload

MEDIUM 57

A vulnerability was found in Byzoro Smart S200 Management Platform up to 20240507.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.0062 Published 2024-05-15 No fix listed CWE-434

TI-2024-00657 CVE-2024-0716 · GHSA-g5p5-24rg-6xfq

Byzoro Smart S150 Management Platform Backup File download.php information disclosure

MEDIUM 57

A vulnerability classified as problematic has been found in Byzoro Smart S150 Management Platform V31R02B15.

CVSS 3.1MEDIUM 5.3 Network Low privileges No interaction EPSS 0.01208 Published 2024-01-19 No fix listed CWE-200

TI-2024-03282 CVE-2024-3521 · GHSA-phxq-f9jh-xw45

Byzoro Smart S80 Management Platform userattestation.php unrestricted upload

MEDIUM 55

A vulnerability was found in Byzoro Smart S80 Management Platform up to 20240317.

CVSS 3.1MEDIUM 4.7 Network High privileges No interaction EPSS 0.0124 Published 2024-04-09 No fix listed CWE-434

TI-2023-05226 CVE-2023-5683 · GHSA-mgjv-r82f-ph9q

Byzoro Smart S85F Management Platform importconf.php os command injection

MEDIUM 54

A vulnerability was found in Byzoro Smart S85F Management Platform up to 20231010 and classified as critical.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.09326 Published 2023-10-21 No fix listed CWE-78

TI-2023-04075 CVE-2023-4414 · GHSA-45qq-m2cx-4ggc

Byzoro Smart S85F Management Platform decodmail.php command injection

MEDIUM 54

A vulnerability was found in Byzoro Smart S85F Management Platform up to 20230807.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.09092 Published 2023-08-18 No fix listed CWE-77

TI-2023-04190 CVE-2023-4544 · GHSA-mh56-636p-hcp5

Byzoro Smart S85F Management Platform php.ini direct request

MEDIUM 53

A vulnerability was found in Byzoro Smart S85F Management Platform up to 20230809.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.01202 Published 2023-08-26 No fix listed CWE-425

TI-2023-05059 CVE-2023-5494 · GHSA-9gpg-73x5-68cm

Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform download.php os command injection

MEDIUM 49

A vulnerability was found in Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform up to 20230928 and classified as critical.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.07722 Published 2023-10-10 No fix listed CWE-78

TI-2024-01785 CVE-2024-1918 · GHSA-jpmx-v3pp-6rp5

Byzoro Smart S42 Management Platform userattestation.php unrestricted upload

MEDIUM 47

A vulnerability has been found in Byzoro Smart S42 Management Platform up to 20240219 and classified as critical.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02333 Published 2024-02-27 No fix listed CWE-434

TI-2023-05762 CVE-2023-6274 · GHSA-2wg5-v4cg-mmvr

Byzoro Smart S80 PHP File updatelib.php unrestricted upload

MEDIUM 47

A vulnerability was found in Byzoro Smart S80 up to 20231108.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02856 Published 2023-11-24 No fix listed CWE-434

TI-2023-03817 CVE-2023-4121 · GHSA-6wxp-8624-h2hh

Byzoro Smart S85F Management Platform unrestricted upload

MEDIUM 47

A vulnerability was found in Byzoro Smart S85F Management Platform up to 20230722.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02515 Published 2023-08-03 No fix listed CWE-434

TI-2023-04373 CVE-2023-4745 · GHSA-m758-wc7v-8xpg

Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform importexport.php sql injection

MEDIUM 46

A vulnerability was found in Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform up to 20230822.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01949 Published 2023-09-03 No fix listed CWE-89

TI-2023-06026 CVE-2023-6575 · GHSA-xwmv-cv85-273r

Byzoro S210 HTTP POST Request repair.php sql injection

MEDIUM 43

A vulnerability was found in Byzoro S210 up to 20231121.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02838 Published 2023-12-07 No fix listed CWE-89

Open these records in search →