Vulnerabilities

TI-2024-06290 CVE-2024-6787 · GHSA-rchh-4f4f-rp53

MXview One Series vulnerable to Time-of-check Time-of-use (TOCTOU) Race Condition

LOW 26

This vulnerability occurs when an attacker exploits a race condition between the time a file is checked and the time it is used (TOCTOU).

CVSS 4.0MEDIUM 6.0 Network Low privileges No interaction EPSS 0.00261 Published 2024-09-21 Fixed in 1.4 CWE-367

TI-2024-06289 CVE-2024-6786 · GHSA-26q7-27mp-g4qj

MXview One Series vulnerable to Path Traversal

LOW 28

The vulnerability allows an attacker to craft MQTT messages that include relative path traversal sequences, enabling them to read arbitrary files on the system.

CVSS 4.0MEDIUM 6.0 Network Low privileges No interaction EPSS 0.00554 Published 2024-09-21 Fixed in 1.4 CWE-24

TI-2024-06288 CVE-2024-6785 · GHSA-8hgr-rp5m-j4mg

MXview One and MXview One Central Manager Series store cleartext credentials in a local file

LOW 29

The configuration file stores credentials in cleartext.

CVSS 4.0MEDIUM 6.8 Local Low privileges No interaction EPSS 0.00113 Published 2024-09-21 Fixed in 1.3.0, 1.0.0 CWE-313

Vulnerabilities

Filters

MXview One Series vulnerable to Time-of-check Time-of-use (TOCTOU) Race Condition

MXview One Series vulnerable to Path Traversal

MXview One and MXview One Central Manager Series store cleartext credentials in a local file