Szuray Uhae264-16
6 CVEs affecting Szuray Uhae264-16. Latest disclosed: 2020-10-06. Critical: 4, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-24218 | Critical | 9.8 | 2020-10-06 | An issue was discovered on URayTech IPTV/H.264/H.265 video encoders through 1.97. Attackers can log in as root via the password that is hard-coded in the execu… |
CVE-2020-24217 | Critical | 9.8 | 2020-10-06 | An issue was discovered in the box application on HiSilicon based IPTV/H.264/H.265 video encoders. The file-upload endpoint does not enforce authentication. At… |
CVE-2020-24215 | Critical | 9.8 | 2020-10-06 | An issue was discovered in the box application on HiSilicon based IPTV/H.264/H.265 video encoders. Attackers can use hard-coded credentials in HTTP requests to… |
CVE-2020-24214 | Critical | 9.8 | 2020-10-06 | An issue was discovered in the box application on HiSilicon based IPTV/H.264/H.265 video encoders. Attackers can send a crafted unauthenticated RTSP request to… |
CVE-2020-24219 | High | 7.5 | 2020-10-06 | An issue was discovered on URayTech IPTV/H.264/H.265 video encoders through 1.97. Attackers can send crafted unauthenticated HTTP requests to exploit path trav… |
CVE-2020-24216 | High | 7.5 | 2020-10-06 | An issue was discovered in the box application on HiSilicon based IPTV/H.264/H.265 video encoders. When the administrator configures a secret URL for RTSP stre… |