Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: TMT Component: Lockcell Firmware Clear all filters
TI-2023-02857 CVE-2023-3050 · GHSA-6q68-2qq3-8c3h

Authentication Bypass in TMT's Lockcell

Priority MEDIUM 52

Reliance on Cookies without Validation and Integrity Checking in a Security Decision vulnerability in TMT Lockcell allows Privilege Abuse, Authentication Bypass.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01314 Published 2023-06-13 Fixed in 15 CWE-784
TI-2023-02856 CVE-2023-3049 · GHSA-88gf-qqgm-77w7

File Upload in TMT's Lockcell

Priority MEDIUM 55

Unrestricted Upload of File with Dangerous Type vulnerability in TMT Lockcell allows Command Injection.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03711 Published 2023-06-13 Fixed in 15 CWE-434
TI-2023-02855 CVE-2023-3048 · GHSA-h833-j235-xgxg

IDOR in TMT's Lockcell

Priority MEDIUM 51

Authorization Bypass Through User-Controlled Key vulnerability in TMT Lockcell allows Authentication Abuse, Authentication Bypass.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01295 Published 2023-06-13 Fixed in 15 CWE-639
TI-2023-02854 CVE-2023-3047 · GHSA-mgww-cfhv-rhp8

SQLi in TMT's Lockcell

Priority MEDIUM 52

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TMT Lockcell allows SQL Injection.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01665 Published 2023-06-13 Fixed in 15 CWE-89