Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: Image Access Scan2Net 7.42 Clear all filters
TI-2024-18724 CVE-2024-28146 · GHSA-84p4-9xrj-9rj5

Hardcoded credentials in Image Access GmbH Scan2Net

Priority LOW 38

The application uses several hard-coded credentials to encrypt config files during backup, to decrypt the new firmware during an update and some passwords allow a direct connection to the database server of the affected…

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00266 Published 2024-12-12 Fixed in 7.42 CWE-798
TI-2024-34013 CVE-2024-50584 · GHSA-pr2c-m553-hpcv

SQL injection in Image Access GmbH Scan2Net

Priority LOW 20

An authenticated attacker with the user/role "Poweruser" can perform an SQL injection by accessing the /class/template_io.php file and supplying malicious GET parameters.

CVSS 3.1MEDIUM 4.4 Local Low privileges No interaction EPSS 0.00292 Published 2024-12-12 Fixed in 7.42 CWE-89
TI-2024-24274 CVE-2024-36498 · GHSA-33rg-9hjg-3559

Stored cross site scripting in Image Access GmbH Scan2Net

Priority MEDIUM 55

Due to missing input sanitization, an attacker can perform cross-site-scripting attacks and run arbitrary Javascript in the browser of other users.

CVSS 3.1MEDIUM 4.7 Network No auth User interaction EPSS 0.00554 Published 2024-12-12 Fixed in 7.42 CWE-79