Image Access Gmbh Scan2net
14 CVEs affecting Image Access Gmbh Scan2net. Latest disclosed: 2024-12-12. Critical: 0, High: 5.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-28139 | High | 8.8 | 2024-12-11 | The www-data user can elevate its privileges because sudo is configured to allow the execution of the mount command as root without a password. Therefore, the… |
CVE-2024-28146 | High | 8.4 | 2024-12-12 | The application uses several hard-coded credentials to encrypt config files during backup, to decrypt the new firmware during an update and some passwords allo… |
CVE-2024-28143 | High | 8.4 | 2024-12-12 | The password change function at /cgi/admin.cgi does not require the current/old password, which makes the application vulnerable to account takeover. An attack… |
CVE-2024-28138 | High | 7.3 | 2024-12-10 | An unauthenticated attacker with network access to the affected device's web interface can execute any system command via the "msg_events.php" script as the ww… |
CVE-2024-47946 | High | 7.2 | 2024-12-10 | If the attacker has access to a valid Poweruser session, remote code execution is possible because specially crafted valid PNG files with injected PHP content… |
CVE-2024-28141 | Medium | 6.3 | 2024-12-11 | The web application is not protected against cross-site request forgery attacks. Therefore, an attacker can trick users into performing actions on the applicat… |
CVE-2024-28140 | Medium | 6.1 | 2024-12-11 | The scanner device boots into a kiosk mode by default and opens the Scan2Net interface in a browser window. This browser is run with the permissions of the roo… |
CVE-2024-28145 | Medium | 5.9 | 2024-12-12 | An unauthenticated attacker can perform an SQL injection by accessing the /class/dbconnect.php file and supplying malicious GET parameters. The HTTP GET parame… |
CVE-2024-28144 | Medium | 5.5 | 2024-12-12 | An attacker who can spoof the IP address and the User-Agent of a logged-in user can takeover the session because of flaws in the self-developed session managem… |
CVE-2024-47947 | Medium | 4.7 | 2024-12-12 | Due to missing input sanitization, an attacker can perform cross-site-scripting attacks and run arbitrary Javascript in the browser of other users. The "Edit D… |
CVE-2024-36498 | Medium | 4.7 | 2024-12-12 | Due to missing input sanitization, an attacker can perform cross-site-scripting attacks and run arbitrary Javascript in the browser of other users. The "Edit D… |
CVE-2024-36494 | Medium | 4.7 | 2024-12-12 | Due to missing input sanitization, an attacker can perform cross-site-scripting attacks and run arbitrary Javascript in the browser of other users. The login p… |
CVE-2024-28142 | Medium | 4.7 | 2024-12-12 | Due to missing input sanitization, an attacker can perform cross-site-scripting attacks and run arbitrary Javascript in the browser of other users. The "File N… |
CVE-2024-50584 | Medium | 4.4 | 2024-12-12 | An authenticated attacker with the user/role "Poweruser" can perform an SQL injection by accessing the /class/template_io.php file and supplying malicious GET… |