Synel Terminals - CWE-494: Download of Code Without Integrity Check
Priority MEDIUM 43CWE-494Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Code execution
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-494.
Summary
Synel Terminals - CWE-494: Download of Code Without Integrity Check
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.0032 25th percentileScored 2026-11-07
Fix Fixed Terminals (Synel ): Upgrade to version 3015.1
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Synel | Terminals | All versions to before Upgrade to version 3015.1 | Upgrade to version 3015.1 | Patch available | CNA |
- Terminals VendorSynel Affected All versions to before Upgrade to version 3015.1 Fixed in Upgrade to version 3015.1 Patch available CNA
CPE configurations NVD · 42
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:synel:synergy\/a_firmware:*:*:*:*:*:*:*:* | before 3015.1 | Vulnerable | Synel |
| cpe:2.3:h:synel:synergy\/a:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Synel |
| cpe:2.3:o:synel:synergy_touch_firmware:*:*:*:*:*:*:*:* | before 3015.1 | Vulnerable | Synel |
| cpe:2.3:h:synel:synergy_touch:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Synel |
| cpe:2.3:o:synel:synergy_10_firmware:*:*:*:*:*:*:*:* | before 3015.1 | Vulnerable | Synel |
| cpe:2.3:h:synel:synergy_10:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Synel |
| cpe:2.3:o:synel:synergy_5_firmware:*:*:*:*:*:*:*:* | before 3015.1 | Vulnerable | Synel |
| cpe:2.3:h:synel:synergy_5:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Synel |
| cpe:2.3:o:synel:sy-910_firmware:*:*:*:*:*:*:*:* | before 3015.1 | Vulnerable | Synel |
| cpe:2.3:h:synel:sy-910:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Synel |
- cpe:2.3:o:synel:synergy\/a_firmware:*:*:*:*:*:*:*:* Versions before 3015.1 Vulnerable ·Synel
- cpe:2.3:h:synel:synergy\/a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Synel
- cpe:2.3:o:synel:synergy_touch_firmware:*:*:*:*:*:*:*:* Versions before 3015.1 Vulnerable ·Synel
- cpe:2.3:h:synel:synergy_touch:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Synel
- cpe:2.3:o:synel:synergy_10_firmware:*:*:*:*:*:*:*:* Versions before 3015.1 Vulnerable ·Synel
- cpe:2.3:h:synel:synergy_10:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Synel
- cpe:2.3:o:synel:synergy_5_firmware:*:*:*:*:*:*:*:* Versions before 3015.1 Vulnerable ·Synel
- cpe:2.3:h:synel:synergy_5:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Synel
- cpe:2.3:o:synel:sy-910_firmware:*:*:*:*:*:*:*:* Versions before 3015.1 Vulnerable ·Synel
- cpe:2.3:h:synel:sy-910:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Synel
Show 32 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:synel:synergy\/x_firmware:*:*:*:*:*:*:*:* | before 3015.1 | Vulnerable | Synel |
| cpe:2.3:h:synel:synergy\/x:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Synel |
| cpe:2.3:o:synel:sy110_face_firmware:*:*:*:*:*:*:*:* | before 3015.1 | Vulnerable | Synel |
| cpe:2.3:h:synel:sy110_face:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Synel |
| cpe:2.3:o:synel:bioentry-w2_firmware:*:*:*:*:*:*:*:* | before 3015.1 | Vulnerable | Synel |
| cpe:2.3:h:synel:bioentry-w2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Synel |
| cpe:2.3:o:synel:biolite-n2_firmware:*:*:*:*:*:*:*:* | before 3015.1 | Vulnerable | Synel |
| cpe:2.3:h:synel:biolite-n2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Synel |
| cpe:2.3:o:synel:bioentry_p2_firmware:*:*:*:*:*:*:*:* | before 3015.1 | Vulnerable | Synel |
| cpe:2.3:h:synel:bioentry_p2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Synel |
| cpe:2.3:o:synel:sy-711_firmware:*:*:*:*:*:*:*:* | before 3015.1 | Vulnerable | Synel |
| cpe:2.3:h:synel:sy-711:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Synel |
| cpe:2.3:o:synel:sy-715_firmware:*:*:*:*:*:*:*:* | before 3015.1 | Vulnerable | Synel |
| cpe:2.3:h:synel:sy-715:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Synel |
| cpe:2.3:o:synel:sy-751_firmware:*:*:*:*:*:*:*:* | before 3015.1 | Vulnerable | Synel |
| cpe:2.3:h:synel:sy-751:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Synel |
| cpe:2.3:o:synel:sy-755_firmware:*:*:*:*:*:*:*:* | before 3015.1 | Vulnerable | Synel |
| cpe:2.3:h:synel:sy-755:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Synel |
| cpe:2.3:o:synel:sy-777_firmware:*:*:*:*:*:*:*:* | before 3015.1 | Vulnerable | Synel |
| cpe:2.3:h:synel:sy-777:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Synel |
| cpe:2.3:o:synel:sy-785_firmware:*:*:*:*:*:*:*:* | before 3015.1 | Vulnerable | Synel |
| cpe:2.3:h:synel:sy-785:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Synel |
| cpe:2.3:o:synel:sy-765_firmware:*:*:*:*:*:*:*:* | before 3015.1 | Vulnerable | Synel |
| cpe:2.3:h:synel:sy-765:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Synel |
| cpe:2.3:o:synel:sy-7500_firmware:*:*:*:*:*:*:*:* | before 3015.1 | Vulnerable | Synel |
| cpe:2.3:h:synel:sy-7500:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Synel |
| cpe:2.3:o:synel:sy-745_firmware:*:*:*:*:*:*:*:* | before 3015.1 | Vulnerable | Synel |
| cpe:2.3:h:synel:sy-745:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Synel |
| cpe:2.3:o:synel:sy-780_firmware:*:*:*:*:*:*:*:* | before 3015.1 | Vulnerable | Synel |
| cpe:2.3:h:synel:sy-780:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Synel |
| cpe:2.3:o:synel:synergy_firmware:*:*:*:*:*:*:*:* | before 3015.1 | Vulnerable | Synel |
| cpe:2.3:h:synel:synergy:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Synel |
- cpe:2.3:o:synel:synergy\/x_firmware:*:*:*:*:*:*:*:* Versions before 3015.1 Vulnerable ·Synel
- cpe:2.3:h:synel:synergy\/x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Synel
- cpe:2.3:o:synel:sy110_face_firmware:*:*:*:*:*:*:*:* Versions before 3015.1 Vulnerable ·Synel
- cpe:2.3:h:synel:sy110_face:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Synel
- cpe:2.3:o:synel:bioentry-w2_firmware:*:*:*:*:*:*:*:* Versions before 3015.1 Vulnerable ·Synel
- cpe:2.3:h:synel:bioentry-w2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Synel
- cpe:2.3:o:synel:biolite-n2_firmware:*:*:*:*:*:*:*:* Versions before 3015.1 Vulnerable ·Synel
- cpe:2.3:h:synel:biolite-n2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Synel
- cpe:2.3:o:synel:bioentry_p2_firmware:*:*:*:*:*:*:*:* Versions before 3015.1 Vulnerable ·Synel
- cpe:2.3:h:synel:bioentry_p2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Synel
- cpe:2.3:o:synel:sy-711_firmware:*:*:*:*:*:*:*:* Versions before 3015.1 Vulnerable ·Synel
- cpe:2.3:h:synel:sy-711:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Synel
- cpe:2.3:o:synel:sy-715_firmware:*:*:*:*:*:*:*:* Versions before 3015.1 Vulnerable ·Synel
- cpe:2.3:h:synel:sy-715:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Synel
- cpe:2.3:o:synel:sy-751_firmware:*:*:*:*:*:*:*:* Versions before 3015.1 Vulnerable ·Synel
- cpe:2.3:h:synel:sy-751:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Synel
- cpe:2.3:o:synel:sy-755_firmware:*:*:*:*:*:*:*:* Versions before 3015.1 Vulnerable ·Synel
- cpe:2.3:h:synel:sy-755:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Synel
- cpe:2.3:o:synel:sy-777_firmware:*:*:*:*:*:*:*:* Versions before 3015.1 Vulnerable ·Synel
- cpe:2.3:h:synel:sy-777:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Synel
- cpe:2.3:o:synel:sy-785_firmware:*:*:*:*:*:*:*:* Versions before 3015.1 Vulnerable ·Synel
- cpe:2.3:h:synel:sy-785:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Synel
- cpe:2.3:o:synel:sy-765_firmware:*:*:*:*:*:*:*:* Versions before 3015.1 Vulnerable ·Synel
- cpe:2.3:h:synel:sy-765:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Synel
- cpe:2.3:o:synel:sy-7500_firmware:*:*:*:*:*:*:*:* Versions before 3015.1 Vulnerable ·Synel
- cpe:2.3:h:synel:sy-7500:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Synel
- cpe:2.3:o:synel:sy-745_firmware:*:*:*:*:*:*:*:* Versions before 3015.1 Vulnerable ·Synel
- cpe:2.3:h:synel:sy-745:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Synel
- cpe:2.3:o:synel:sy-780_firmware:*:*:*:*:*:*:*:* Versions before 3015.1 Vulnerable ·Synel
- cpe:2.3:h:synel:sy-780:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Synel
- cpe:2.3:o:synel:synergy_firmware:*:*:*:*:*:*:*:* Versions before 3015.1 Vulnerable ·Synel
- cpe:2.3:h:synel:synergy:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Synel
Remediation
- Fix · CNA Terminals (Synel ) Fixed in Upgrade to version 3015.1
Timeline
- 2026-10-02 Threatist record created from CVE-2023-37220
- 2026-10-03 Alias added: GHSA-m44r-gw9x-mgm2
References
Sources
- CVE-2023-37220 · CVE Program
- CVE-2023-37220 · NVD
- FIRST EPSS
- GHSA-m44r-gw9x-mgm2 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences