Vendors / motioneye-project Records 9 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 5
Exploited now motioneye-project records in CISA KEV No motioneye-project vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 67
MotionEye v0.43.1b4 and before is vulnerable to OS Command Injection in configuration parameters such as image_file_name.
CVSS 3.1 HIGH 7.2· Network · High privileges · No interaction · EPSS 0.18462 · Published 2025-10-03 · Fixed in 0.43.1b5 CWE-116
Priority MEDIUM 43
MotionEye v0.42.1 and below allows attackers to access sensitive information via a GET request to /config/list.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.0686 · Published 2022-03-24 · Fixed in 0.43.1b1 CWE-1188
Priority LOW 37
Authenticated remote code execution in MotionEye <= 0.42.1 and MotioneEyeOS <= 20200606 allows a remote attacker to upload a configuration backup file containing a malicious python pickle file which will execute arbitrar…
CVSS 3.1 HIGH 7.2· Network · High privileges · No interaction · EPSS 0.03138 · Published 2022-01-31 · No fix listed CWE-306
Open these records in search → All records by CVSS severity
1 5 3 0 0
THREATIST.IORead the docs