Infiray Iray-A8z3
4 CVEs affecting Infiray Iray-A8z3. Latest disclosed: 2022-07-17. Critical: 3, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-31211 | Critical | 9.8 | 2022-07-17 | An issue was discovered in Infiray IRAY-A8Z3 1.0.957. There is a blank root password for TELNET by default. |
CVE-2022-31210 | Critical | 9.8 | 2022-07-17 | An issue was discovered in Infiray IRAY-A8Z3 1.0.957. The binary file /usr/local/sbin/webproject/set_param.cgi contains hardcoded credentials to the web applic… |
CVE-2022-31209 | Critical | 9.8 | 2022-07-17 | An issue was discovered in Infiray IRAY-A8Z3 1.0.957. The firmware contains a potential buffer overflow by calling strcpy() without checking the string length… |
CVE-2022-31208 | High | 8.8 | 2022-07-17 | An issue was discovered in Infiray IRAY-A8Z3 1.0.957. The webserver contains an endpoint that can execute arbitrary commands by manipulating the cmd_string URL… |