Vulnerabilities

TI-2019-15289 CVE-2019-25235 · GHSA-2gww-fh48-p92f

Smartwares HOME easy 1.0.9 Client-Side Authentication Bypass via Web Pages

HIGH 77

Smartwares HOME easy 1.0.9 contains an authentication bypass vulnerability that allows unauthenticated attackers to access administrative web pages by disabling JavaScript.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00485 Published 2025-12-24 No fix listed CWE-639

TI-2024-12914 CVE-2024-13894 · GHSA-vw7g-g3g7-v6rm

Path traversal in Smartwares cameras

LOW 26

Smartwares cameras CIP-37210AT and C724IP, as well as others which share the same firmware in versions up to 3.3.0, are vulnerable to path traversal.

CVSS 4.0MEDIUM 5.9 Local No auth No interaction EPSS 0.00223 Published 2025-03-06 No fix listed CWE-22

TI-2024-12913 CVE-2024-13893 · GHSA-xm5p-cw89-f4rg

Shared credentials in Smartwares cameras

LOW 34

Smartwares cameras CIP-37210AT and C724IP, as well as others which share the same firmware in versions up to 3.3.0, might share same credentials for telnet service.

CVSS 4.0HIGH 7.5 Local No auth No interaction EPSS 0.00162 Published 2025-03-06 No fix listed CWE-1392

TI-2024-12912 CVE-2024-13892 · GHSA-mcv4-fgfj-mggf

Command Injection in Smartwares cameras

LOW 37

Smartwares cameras CIP-37210AT and C724IP, as well as others which share the same firmware in versions up to 3.3.0, are vulnerable to command injection.

CVSS 4.0HIGH 7.7 Adjacent network No auth No interaction EPSS 0.00665 Published 2025-03-06 No fix listed CWE-78

TI-2020-14222 CVE-2020-21997 · GHSA-72w9-82w3-f3rf

Smartwares HOME easy <=1.0.9 is vulnerable to an unauthenticated database backup download…

LOW 38

Smartwares HOME easy <=1.0.9 is vulnerable to an unauthenticated database backup download and information disclosure vulnerability.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02717 Published 2021-04-29 No fix listed CWE-306