Read the docs

TMT

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical4CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

TMT records in CISA KEV

No TMT vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Lockcell Firmware 4 records MEDIUM

Records

4 records

TI-2023-02856 CVE-2023-3049 · GHSA-88gf-qqgm-77w7

File Upload in TMT's Lockcell

Priority MEDIUM 55

Unrestricted Upload of File with Dangerous Type vulnerability in TMT Lockcell allows Command Injection.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03711 Published 2023-06-13 Fixed in 15 CWE-434
TI-2023-02857 CVE-2023-3050 · GHSA-6q68-2qq3-8c3h

Authentication Bypass in TMT's Lockcell

Priority MEDIUM 52

Reliance on Cookies without Validation and Integrity Checking in a Security Decision vulnerability in TMT Lockcell allows Privilege Abuse, Authentication Bypass.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01314 Published 2023-06-13 Fixed in 15 CWE-784
TI-2023-02854 CVE-2023-3047 · GHSA-mgww-cfhv-rhp8

SQLi in TMT's Lockcell

Priority MEDIUM 52

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TMT Lockcell allows SQL Injection.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01665 Published 2023-06-13 Fixed in 15 CWE-89
TI-2023-02855 CVE-2023-3048 · GHSA-h833-j235-xgxg

IDOR in TMT's Lockcell

Priority MEDIUM 51

Authorization Bypass Through User-Controlled Key vulnerability in TMT Lockcell allows Authentication Abuse, Authentication Bypass.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01295 Published 2023-06-13 Fixed in 15 CWE-639
Open these records in search →