Vendors / Fantec Records 2 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 2
Exploited now Fantec records in CISA KEV No Fantec vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority LOW 38
An issue in upload.csp of FANTEC GmbH MWiD25-DS Firmware v2.000.030 allows attackers to write files and reset the user passwords without having a valid session cookie.
CVSS 3.1 HIGH 7.2· Network · High privileges · No interaction · EPSS 0.03709 · Published 2022-04-15 · No fix listed CWE-565
Priority LOW 35
FANTEC GmbH MWiD25-DS Firmware v2.000.030 allows unauthenticated attackers to access and download arbitrary files via a crafted GET request.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.01103 · Published 2022-04-06 · No fix listed CWE-384
Open these records in search → All records by CVSS severity
0 2 0 0 0
