Company Cs-C2shw
4 CVEs affecting Company Cs-C2shw. Latest disclosed: 2021-01-26. Critical: 2, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-27540 | Critical | 9.8 | 2021-01-26 | Bash injection vulnerability and bypass of signature verification in Rostelecom CS-C2SHW 5.0.082.1. The camera reads firmware update configuration from SD card… |
CVE-2020-27539 | Critical | 9.8 | 2021-01-26 | Heap overflow with full parsing of HTTP respose in Rostelecom CS-C2SHW 5.0.082.1. AgentUpdater service has a self-written HTTP parser and builder. HTTP parser… |
CVE-2020-27541 | High | 7.5 | 2021-01-26 | Denial of Service vulnerability in Rostelecom CS-C2SHW 5.0.082.1. AgentGreen service has a bug in parsing broadcast discovery UDP packet. Sending a packet of t… |
CVE-2020-27542 | Medium | 6.8 | 2021-01-26 | Rostelecom CS-C2SHW 5.0.082.1 is affected by: Bash command injection. The camera reads configuration from QR code (including network settings). The static IP c… |