Vulnerabilities

TI-2023-18853 CVE-2023-37220 · GHSA-m44r-gw9x-mgm2

Synel Terminals - CWE-494: Download of Code Without Integrity Check

MEDIUM 43

Synel Terminals - CWE-494: Download of Code Without Integrity Check

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0032 Published 2023-09-03 Fixed in Upgrade to version 3015.1 CWE-494

TI-2023-18846 CVE-2023-37213 · GHSA-c68q-gmxm-c293

MEDIUM 45

Synel SYnergy Fingerprint Terminals - CWE-78: 'OS Command Injection'

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01289 Published 2023-07-30 Fixed in 3015.1 CWE-78

TI-2023-15526 CVE-2023-32227 · GHSA-9jxh-g268-j7wh

MEDIUM 43

Synel SYnergy Fingerprint Terminals - CWE-798: Use of Hard-coded Credentials

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00621 Published 2023-07-30 Fixed in 3015.1 CWE-798