Cellinx

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

Cellinx records in CISA KEV

No Cellinx vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Nvt Web Server 3 records MEDIUM Cellinx Nvt - Ip Ptz Camera Firmware 2 records LOW

Records

5 records

TI-2020-17159 CVE-2020-28250 · GHSA-rhgf-cvf4-wpf6

Cellinx NVT Web Server 5.0.0.014b.test 2019-09-05 allows a remote user to run commands as…

MEDIUM 47

Cellinx NVT Web Server 5.0.0.014b.test 2019-09-05 allows a remote user to run commands as root via SetFileContent.cgi because authentication is on the client side.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02886 Published 2020-11-06 No fix listed

TI-2022-12756 CVE-2022-30620 · GHSA-7mq3-jhxf-cfj7

Cellinx NVT – IP PTZ Camera Privilege Escalation

LOW 39

On Cellinx Camera with guest enabled, attacker with web access can elevate privileges to administrative: "1" to "0" privileges by changing the following cookie values from "is_admin", "showConfig".

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00539 Published 2022-07-18 No fix listed CWE-565

TI-2023-09128 CVE-2023-23063 · GHSA-94xq-jfvq-m5cx

Cellinx NVT v1.0.6.002b was discovered to contain a local file disclosure vulnerability…

LOW 37

Cellinx NVT v1.0.6.002b was discovered to contain a local file disclosure vulnerability via the component /cgi-bin/GetFileContent.cgi.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02431 Published 2023-02-22 No fix listed CWE-22

TI-2022-12757 CVE-2022-30621 · GHSA-q472-c8jf-w689

Cellinx NVT – IP PTZ Camera local file inclusion

LOW 34

Allows a remote user to read files on the camera's OS "GetFileContent.cgi".

CVSS 3.1HIGH 7.6 Network Low privileges User interaction EPSS 0.00711 Published 2022-07-18 No fix listed CWE-706

TI-2024-16041 CVE-2024-24215 · GHSA-4vq7-3qhw-47p6

An issue in the component /cgi-bin/GetJsonValue.cgi of Cellinx NVT Web Server 5.0.0.014…

LOW 31

An issue in the component /cgi-bin/GetJsonValue.cgi of Cellinx NVT Web Server 5.0.0.014 allows attackers to leak configuration information via a crafted POST request.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.005 Published 2024-02-08 No fix listed CWE-200

Open these records in search →

Critical	1
High	3
Medium	1
Low	0
No CVSS	0