Vulnerabilities

TI-2023-16446 CVE-2023-33284 · GHSA-cvj8-hjgc-jvf3

Marval MSM through 14.19.0.12476 and 15.0 has a Remote Code Execution vulnerability.

MEDIUM 42

Marval MSM through 14.19.0.12476 and 15.0 has a Remote Code Execution vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01071 Published 2023-06-07 No fix listed CWE-502

TI-2023-16445 CVE-2023-33283 · GHSA-9m5v-w59r-w83p

LOW 24

Marval MSM through 14.19.0.12476 uses a static encryption key for secrets.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00108 Published 2023-06-07 No fix listed CWE-326

TI-2023-16444 CVE-2023-33282 · GHSA-cfjj-6wq7-4f8w

MEDIUM 51

Marval MSM through 14.19.0.12476 and 15.0 has a System account with default credentials.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00991 Published 2023-06-07 No fix listed CWE-276