Sinapsitech

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Sinapsitech records in CISA KEV

No Sinapsitech vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

4 records in Sinapsi Firmware · all components

TI-2012-04892 CVE-2012-5863 · GHSA-44xp-g462-97fp

MEDIUM 64

These Sinapsi devices do not check for special elements in commands sent to the system.

CVSS 2.0CRITICAL 10.0 Network No auth Interaction — EPSS 0.24823 Published 2012-11-23 Fixed in 2.0.2870_xxx_2.2.12 CWE-78

TI-2012-04891 CVE-2012-5862 · GHSA-8xw2-rf2c-8v7w

MEDIUM 57

These Sinapsi devices store hard-coded passwords in the PHP file of the device.

CVSS 2.0CRITICAL 10.0 Network No auth Interaction — EPSS 0.12079 Published 2012-11-23 Fixed in 2.0.2870_xxx_2.2.12 CWE-259

TI-2012-04893 CVE-2012-5864 · GHSA-v26h-2hg9-6mq7

MEDIUM 51

These Sinapsi devices do not check if users that visit pages within the device have properly authenticated.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.04905 Published 2012-11-23 Fixed in 2.0.2870_xxx_2.2.12 CWE-287

TI-2012-04890 CVE-2012-5861 · GHSA-f4r2-hvg9-43x3

MEDIUM 41

These Sinapsi devices do not check the validity of the data before executing queries.

CVSS 2.0HIGH 7.8 Network No auth Interaction — EPSS 0.04239 Published 2012-11-23 Fixed in 2.0.2870_xxx_2.2.12 CWE-89