Vulnerabilities

TI-2024-16041 CVE-2024-24215 · GHSA-4vq7-3qhw-47p6

An issue in the component /cgi-bin/GetJsonValue.cgi of Cellinx NVT Web Server 5.0.0.014…

LOW 31

An issue in the component /cgi-bin/GetJsonValue.cgi of Cellinx NVT Web Server 5.0.0.014 allows attackers to leak configuration information via a crafted POST request.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.005 Published 2024-02-08 No fix listed CWE-200

TI-2023-09128 CVE-2023-23063 · GHSA-94xq-jfvq-m5cx

Cellinx NVT v1.0.6.002b was discovered to contain a local file disclosure vulnerability…

LOW 37

Cellinx NVT v1.0.6.002b was discovered to contain a local file disclosure vulnerability via the component /cgi-bin/GetFileContent.cgi.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02431 Published 2023-02-22 No fix listed CWE-22

TI-2022-12757 CVE-2022-30621 · GHSA-q472-c8jf-w689

Cellinx NVT – IP PTZ Camera local file inclusion

LOW 34

Allows a remote user to read files on the camera's OS "GetFileContent.cgi".

CVSS 3.1HIGH 7.6 Network Low privileges User interaction EPSS 0.00711 Published 2022-07-18 No fix listed CWE-706

TI-2022-12756 CVE-2022-30620 · GHSA-7mq3-jhxf-cfj7

Cellinx NVT – IP PTZ Camera Privilege Escalation

LOW 39

On Cellinx Camera with guest enabled, attacker with web access can elevate privileges to administrative: "1" to "0" privileges by changing the following cookie values from "is_admin", "showConfig".

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00539 Published 2022-07-18 No fix listed CWE-565

TI-2020-17159 CVE-2020-28250 · GHSA-rhgf-cvf4-wpf6

Cellinx NVT Web Server 5.0.0.014b.test 2019-09-05 allows a remote user to run commands as…

MEDIUM 47

Cellinx NVT Web Server 5.0.0.014b.test 2019-09-05 allows a remote user to run commands as root via SetFileContent.cgi because authentication is on the client side.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02886 Published 2020-11-06 No fix listed