Read the docs

Contec Co., Ltd.

Records81All Threatist records
Exploited (KEV)1In CISA KEV
CVSS critical9CVSS 9.0–10.0
CVSS high36CVSS 7.0–8.9

Exploited now

Contec Co., Ltd. records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

6 records in Sv-cpt-mc310f Firmware · all components

Priority MEDIUM 44

OS command injection vulnerability in the mail setting page of SolarView Compact SV-CPT-MC310 versions prior to Ver.8.10 and SV-CPT-MC310F versions prior to Ver.8.10 allows remote authenticated attackers to execute an ar…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01908 Published 2023-05-23 No fix listed CWE-78
Priority MEDIUM 44

OS command injection vulnerability in the download page of SolarView Compact SV-CPT-MC310 versions prior to Ver.8.10 and SV-CPT-MC310F versions prior to Ver.8.10 allows a remote authenticated attacker to execute an arbit…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01908 Published 2023-05-23 No fix listed CWE-78
Priority MEDIUM 43

Buffer overflow vulnerability in the multiple setting pages of SolarView Compact SV-CPT-MC310 versions prior to Ver.8.10 and SV-CPT-MC310F versions prior to Ver.8.10 allows a remote authenticated attacker to execute arbi…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01516 Published 2023-05-23 No fix listed CWE-120
Priority MEDIUM 41

The image file management page of SolarView Compact SV-CPT-MC310 Ver.7.23 and earlier, and SV-CPT-MC310F Ver.7.23 and earlier contains an insufficient verification vulnerability when uploading files.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01523 Published 2022-08-16 No fix listed CWE-20
Priority LOW 36

Use of hard-coded credentials exists in SolarView Compact SV-CPT-MC310 versions prior to Ver.8.10, and SV-CPT-MC310F versions prior to Ver.8.10, which may allow a remote authenticated attacker to login the affected produ…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01028 Published 2023-05-23 No fix listed CWE-798
Priority LOW 24

Improper access control vulnerability in the system date/time setting page of SolarView Compact SV-CPT-MC310 versions prior to Ver.8.10 and SV-CPT-MC310F versions prior to Ver.8.10 allows a remote authenticated attacker…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.01832 Published 2023-05-23 No fix listed CWE-863
Open these records in search →