Read the docs

Lanatmservice

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Lanatmservice records in CISA KEV

No Lanatmservice vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
M3 Atm Monitoring System 2 records MEDIUM

Records

2 records in M3 Atm Monitoring System · all components

TI-2020-17824 CVE-2020-29667 · GHSA-4g47-3fx3-5q52

In Lan ATMService M3 ATM Monitoring System 6.1.0, a remote attacker able to use a default…

Priority MEDIUM 48

In Lan ATMService M3 ATM Monitoring System 6.1.0, a remote attacker able to use a default cookie value, such as PHPSESSID=LANIT-IMANAGER, can achieve control over the system because of Insufficient Session Expiration.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0323 Published 2020-12-10 No fix listed CWE-613
TI-2020-17823 CVE-2020-29666 · GHSA-82gg-xqxc-f2wx

In Lan ATMService M3 ATM Monitoring System 6.1.0, due to a directory-listing…

Priority LOW 27

In Lan ATMService M3 ATM Monitoring System 6.1.0, due to a directory-listing vulnerability, a remote attacker can view log files, located in /websocket/logs/, that contain a user's cookie values and the predefined develo…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01457 Published 2020-12-10 No fix listed
Open these records in search →