Vulnerabilities

TI-2019-15345 CVE-2019-25291 · GHSA-f3p3-f3c5-vgr3

INIM Electronics Smartliving SmartLAN/G/SI <=6.x Hard-coded Credentials Vulnerability

HIGH 79

INIM Electronics Smartliving SmartLAN/G/SI <=6.x contains hard-coded credentials in its Linux distribution image that cannot be changed through normal device operations.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00426 Published 2026-01-07 No fix listed CWE-798

TI-2019-15344 CVE-2019-25290 · GHSA-jfj5-mxvh-9vgr

INIM Electronics Smartliving SmartLAN/G/SI <=6.x Unauthenticated SSRF via GetImage

HIGH 70

Smartliving SmartLAN/G/SI <=6.x contains an unauthenticated server-side request forgery vulnerability in the GetImage functionality through the 'host' parameter.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00375 Published 2026-01-07 No fix listed CWE-918

TI-2019-15343 CVE-2019-25289 · GHSA-5qp9-vfg2-vf44

INIM Electronics SmartLiving SmartLAN/G/SI <=6.x Remote Command Execution

HIGH 73

SmartLiving SmartLAN <=6.x contains an authenticated remote command injection vulnerability in the web.cgi binary through the 'par' POST parameter with the 'testemail' module.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.0189 Published 2026-01-07 No fix listed CWE-78

Vulnerabilities

Filters

INIM Electronics Smartliving SmartLAN/G/SI <=6.x Hard-coded Credentials Vulnerability

INIM Electronics Smartliving SmartLAN/G/SI <=6.x Unauthenticated SSRF via GetImage

INIM Electronics SmartLiving SmartLAN/G/SI <=6.x Remote Command Execution