Vulnerabilities

TI-2019-09515 CVE-2019-12720 · GHSA-fpcm-j34w-8cjw

AUO SunVeillance Monitoring System before v1.1.9e is vulnerable to mvc_send_mail.aspx…

LOW 36

AUO SunVeillance Monitoring System before v1.1.9e is vulnerable to mvc_send_mail.aspx (MailAdd parameter) SQL Injection.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01681 Published 2019-11-12 No fix listed CWE-89

TI-2019-09514 CVE-2019-12719 · GHSA-99xf-6j9g-6jww

MEDIUM 46

An issue was discovered in Picture_Manage_mvc.aspx in AUO SunVeillance Monitoring System before v1.1.9e.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02149 Published 2019-11-12 No fix listed CWE-434

TI-2019-08489 CVE-2019-11367 · GHSA-89gq-fxm9-f6xg

MEDIUM 47

An issue was discovered in AUO Solar Data Recorder before 1.3.0.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.0282 Published 2019-06-03 No fix listed CWE-311

TI-2019-08490 CVE-2019-11368 · GHSA-7f7r-hm5r-c8vm

LOW 28

Stored XSS was discovered in AUO Solar Data Recorder before 1.3.0 via the protect/config.htm addr parameter.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.0155 Published 2019-06-03 No fix listed CWE-79