Vulnerabilities

TI-2024-04560 CVE-2024-4904 · GHSA-vw9f-rq55-739q

Byzoro Smart S200 Management Platform userattestation.php unrestricted upload

MEDIUM 57

A vulnerability was found in Byzoro Smart S200 Management Platform up to 20240507.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.0062 Published 2024-05-15 No fix listed CWE-434

TI-2024-03748 CVE-2024-4019 · GHSA-hqjh-x3mc-9p6h

Byzoro Smart S80 Management Platform importhtml.php deserialization

LOW 30

A vulnerability classified as critical has been found in Byzoro Smart S80 Management Platform up to 20240411.

CVSS 3.1MEDIUM 6.3 Network Low privileges No interaction EPSS 0.01009 Published 2024-04-20 No fix listed CWE-502

TI-2024-03282 CVE-2024-3521 · GHSA-phxq-f9jh-xw45

Byzoro Smart S80 Management Platform userattestation.php unrestricted upload

MEDIUM 55

A vulnerability was found in Byzoro Smart S80 Management Platform up to 20240317.

CVSS 3.1MEDIUM 4.7 Network High privileges No interaction EPSS 0.0124 Published 2024-04-09 No fix listed CWE-434

TI-2024-03130 CVE-2024-3346 · GHSA-hhf4-hp7g-q328

Byzoro Smart S80 webmailattach.php os command injection

MEDIUM 61

A vulnerability was found in Byzoro Smart S80 up to 20240328.

CVSS 3.1MEDIUM 6.3 Network Low privileges No interaction EPSS 0.49327 Published 2024-04-05 No fix listed CWE-78

TI-2024-01785 CVE-2024-1918 · GHSA-jpmx-v3pp-6rp5

Byzoro Smart S42 Management Platform userattestation.php unrestricted upload

MEDIUM 47

A vulnerability has been found in Byzoro Smart S42 Management Platform up to 20240219 and classified as critical.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02333 Published 2024-02-27 No fix listed CWE-434

TI-2024-01168 CVE-2024-1254 · GHSA-365x-5gg7-66qg

Byzoro Smart S20 Management Platform sysmanageajax.php sql injection

HIGH 65

A vulnerability, which was classified as critical, was found in Byzoro Smart S20 Management Platform up to 20231120.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.04612 Published 2024-02-06 No fix listed CWE-89

TI-2024-01167 CVE-2024-1253 · GHSA-33cc-g737-2r5g

Byzoro Smart S40 Management Platform Import web.php unrestricted upload

HIGH 65

A vulnerability, which was classified as critical, has been found in Byzoro Smart S40 Management Platform up to 20240126.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01696 Published 2024-02-06 No fix listed CWE-434

TI-2024-00866 CVE-2024-0939 · GHSA-pxvc-5jrx-h52p

Byzoro Smart S210 Management Platform uploadfile.php unrestricted upload

HIGH 75

A vulnerability has been found in Byzoro Smart S210 Management Platform up to 20240117 and classified as critical.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.43777 Published 2024-01-26 No fix listed CWE-434

TI-2024-00657 CVE-2024-0716 · GHSA-g5p5-24rg-6xfq

Byzoro Smart S150 Management Platform Backup File download.php information disclosure

MEDIUM 57

A vulnerability classified as problematic has been found in Byzoro Smart S150 Management Platform V31R02B15.

CVSS 3.1MEDIUM 5.3 Network Low privileges No interaction EPSS 0.01208 Published 2024-01-19 No fix listed CWE-200

TI-2024-00654 CVE-2024-0712 · GHSA-3cqp-gxcm-89f4

Byzoro Smart S150 Management Platform userattea.php access control

HIGH 81

A vulnerability was found in Byzoro Smart S150 Management Platform V31R02B15.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03896 Published 2024-01-19 No fix listed CWE-284

TI-2024-00275 CVE-2024-0300 · GHSA-3j29-j9r5-2r42

Byzoro Smart S150 Management Platform HTTP POST Request userattestation.php unrestricted upload

HIGH 82

A vulnerability was found in Byzoro Smart S150 Management Platform up to 20240101.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.05703 Published 2024-01-08 No fix listed CWE-434

TI-2023-06435 CVE-2023-7039 · GHSA-7674-425x-p4qw

Byzoro S210 importexport.php injection

HIGH 75

A vulnerability classified as critical has been found in Byzoro S210 up to 20231210.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.14225 Published 2023-12-21 No fix listed CWE-74

TI-2023-06028 CVE-2023-6577 · GHSA-3929-x7hw-wqqf

Byzoro PatrolFlow 2530Pro mailsendview.php path traversal

LOW 22

A vulnerability was found in Byzoro PatrolFlow 2530Pro up to 20231126.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.01185 Published 2023-12-07 No fix listed CWE-22

TI-2023-06027 CVE-2023-6576 · GHSA-vv5h-96wr-c27f

Byzoro S210 HTTP POST Request uploadfile.php unrestricted upload

MEDIUM 41

A vulnerability was found in Byzoro S210 up to 20231123.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01365 Published 2023-12-07 No fix listed CWE-434

TI-2023-06026 CVE-2023-6575 · GHSA-xwmv-cv85-273r

Byzoro S210 HTTP POST Request repair.php sql injection

MEDIUM 43

A vulnerability was found in Byzoro S210 up to 20231121.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02838 Published 2023-12-07 No fix listed CWE-89

TI-2023-06025 CVE-2023-6574 · GHSA-wjp2-7h9f-2jxg

Byzoro Smart S20 HTTP POST Request updateos.php unrestricted upload

MEDIUM 41

A vulnerability was found in Byzoro Smart S20 up to 20231120 and classified as critical.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01576 Published 2023-12-07 No fix listed CWE-434

TI-2023-05762 CVE-2023-6274 · GHSA-2wg5-v4cg-mmvr

Byzoro Smart S80 PHP File updatelib.php unrestricted upload

MEDIUM 47

A vulnerability was found in Byzoro Smart S80 up to 20231108.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02856 Published 2023-11-24 No fix listed CWE-434

TI-2023-05490 CVE-2023-5959 · GHSA-p9h2-45x3-q6pj

Byzoro Smart S85F Management Platform login.php password recovery

LOW 22

A vulnerability, which was classified as problematic, was found in Byzoro Smart S85F Management Platform V31R02B10-01.

CVSS 3.1MEDIUM 4.3 Adjacent network No auth No interaction EPSS 0.00877 Published 2023-11-11 No fix listed CWE-640

TI-2023-05227 CVE-2023-5684 · GHSA-229m-w66g-mjph

Byzoro Smart S85F Management Platform importexport.php os command injection

HIGH 75

A vulnerability was found in Byzoro Smart S85F Management Platform up to 20231012.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.26556 Published 2023-10-21 No fix listed CWE-78

TI-2023-05226 CVE-2023-5683 · GHSA-mgjv-r82f-ph9q

Byzoro Smart S85F Management Platform importconf.php os command injection

MEDIUM 54

A vulnerability was found in Byzoro Smart S85F Management Platform up to 20231010 and classified as critical.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.09326 Published 2023-10-21 No fix listed CWE-78

TI-2023-05059 CVE-2023-5494 · GHSA-9gpg-73x5-68cm

Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform download.php os command injection

MEDIUM 49

A vulnerability was found in Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform up to 20230928 and classified as critical.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.07722 Published 2023-10-10 No fix listed CWE-78

TI-2023-05058 CVE-2023-5493 · GHSA-cq5q-x34f-p7m4

Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform web.php unrestricted upload

MEDIUM 42

A vulnerability has been found in Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform up to 20230928 and classified as critical.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01967 Published 2023-10-10 No fix listed CWE-434

TI-2023-05057 CVE-2023-5492 · GHSA-4rfc-h5jw-xx8j

Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform licence.php unrestricted upload

MEDIUM 42

A vulnerability, which was classified as critical, was found in Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform up to 20230928.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02111 Published 2023-10-10 No fix listed CWE-434

TI-2023-05056 CVE-2023-5491 · GHSA-mg88-vr9f-rg8p

Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform updatelib.php unrestricted upload

HIGH 71

A vulnerability, which was classified as critical, has been found in Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform up to 20230928.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01967 Published 2023-10-10 No fix listed CWE-434

TI-2023-05055 CVE-2023-5490 · GHSA-wwcw-2vrq-f4jg

Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform userattestation.php unrestricted upload

MEDIUM 42

A vulnerability classified as critical was found in Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform up to 20230928.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01967 Published 2023-10-10 No fix listed CWE-434

Vulnerabilities

Filters