Lcnet Smart Evision
7 CVEs affecting Lcnet Smart Evision. Latest disclosed: 2022-09-28. Critical: 1, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-39033 | Critical | 9.8 | 2022-09-28 | Smart eVision’s file acquisition function has a path traversal vulnerability due to insufficient filtering for special characters in the URL parameter. An unau… |
CVE-2022-39032 | High | 8.8 | 2022-09-28 | Smart eVision has an improper privilege management vulnerability. A remote attacker with general user privilege can exploit this vulnerability to escalate to a… |
CVE-2022-39030 | High | 7.5 | 2022-09-28 | smart eVision has inadequate authorization for system information query function. An unauthenticated remote attacker, who is not explicitly authorized to acces… |
CVE-2022-39034 | Medium | 6.5 | 2022-09-28 | Smart eVision has a path traversal vulnerability in the Report API function due to insufficient filtering for special characters in URLs. A remote attacker wit… |
CVE-2022-39029 | Medium | 6.5 | 2022-09-28 | Smart eVision has inadequate authorization for the database query function. A remote attacker with general user privilege, who is not explicitly authorized to… |
CVE-2022-39035 | Medium | 6.1 | 2022-09-28 | Smart eVision has insufficient filtering for special characters in the POST Data parameter in the specific function. An unauthenticated remote attacker can inj… |
CVE-2022-39031 | Medium | 5.3 | 2022-09-28 | Smart eVision has insufficient authorization for task acquisition function. An unauthorized remote attacker can exploit this vulnerability to acquire the Sessi… |