elvexys

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

elvexys records in CISA KEV

No elvexys vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Streamx 2 records MEDIUM Isos Firmware 1 record LOW

Records

2 records in Streamx · all components

TI-2022-04375 CVE-2022-4779 · GHSA-w8f5-jp95-mq35

authentication bypass in elvexys StreamX using StreamView HTML component with public web server feature

MEDIUM 51

StreamX applications from versions 6.02.01 to 6.04.34 are affected by a logic bug that allows to bypass the implemented authentication scheme.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01273 Published 2022-12-28 No fix listed CWE-22

TI-2022-04374 CVE-2022-4778 · GHSA-f6gm-jc8c-7qrm

path traversal in elvexys StreamX using StreamView HTML component with public web server feature

LOW 30

StreamX applications from versions 6.02.01 to 6.04.34 are affected by a path traversal vulnerability that allows authenticated users to get unauthorized access to files on the server's filesystem.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00701 Published 2022-12-28 No fix listed CWE-22

Open these records in search →

Critical	1
High	1
Medium	1
Low	0
No CVSS	0