Vulnerabilities

TI-2022-04376 CVE-2022-4780 · GHSA-36rr-m8w9-pvrh

hard coded credentials in elvexys ISOS firmwares

LOW 33

ISOS firmwares from versions 1.81 to 2.00 contain hardcoded credentials from embedded StreamX installer that integrators are not forced to change.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00155 Published 2022-12-28 No fix listed CWE-798

TI-2022-04375 CVE-2022-4779 · GHSA-w8f5-jp95-mq35

authentication bypass in elvexys StreamX using StreamView HTML component with public web server feature

MEDIUM 51

StreamX applications from versions 6.02.01 to 6.04.34 are affected by a logic bug that allows to bypass the implemented authentication scheme.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01273 Published 2022-12-28 No fix listed CWE-22

TI-2022-04374 CVE-2022-4778 · GHSA-f6gm-jc8c-7qrm

path traversal in elvexys StreamX using StreamView HTML component with public web server feature

LOW 30

StreamX applications from versions 6.02.01 to 6.04.34 are affected by a path traversal vulnerability that allows authenticated users to get unauthorized access to files on the server's filesystem.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00701 Published 2022-12-28 No fix listed CWE-22

Vulnerabilities

Filters

hard coded credentials in elvexys ISOS firmwares

authentication bypass in elvexys StreamX using StreamView HTML component with public web server feature

path traversal in elvexys StreamX using StreamView HTML component with public web server feature