Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: Lanatmservice Clear all filters
TI-2020-17824 CVE-2020-29667 · GHSA-4g47-3fx3-5q52

In Lan ATMService M3 ATM Monitoring System 6.1.0, a remote attacker able to use a default…

Priority MEDIUM 48

In Lan ATMService M3 ATM Monitoring System 6.1.0, a remote attacker able to use a default cookie value, such as PHPSESSID=LANIT-IMANAGER, can achieve control over the system because of Insufficient Session Expiration.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0323 Published 2020-12-10 No fix listed CWE-613
TI-2020-17823 CVE-2020-29666 · GHSA-82gg-xqxc-f2wx

In Lan ATMService M3 ATM Monitoring System 6.1.0, due to a directory-listing…

Priority LOW 27

In Lan ATMService M3 ATM Monitoring System 6.1.0, due to a directory-listing vulnerability, a remote attacker can view log files, located in /websocket/logs/, that contain a user's cookie values and the predefined develo…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01457 Published 2020-12-10 No fix listed