Tecnovision Dlx Spot Player4
3 CVEs affecting Tecnovision Dlx Spot Player4. Latest disclosed: 2017-09-21. Critical: 2, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-12930 | Critical | 9.8 | 2017-09-21 | SQL Injection in the admin interface in TecnoVISION DLX Spot Player4 version >1.5.10 allows remote unauthenticated users to access the web interface as adminis… |
CVE-2017-12928 | Critical | 9.8 | 2017-09-21 | A hard-coded password of tecn0visi0n for the dlxuser account in TecnoVISION DLX Spot Player4 (all known versions) allows remote attackers to log in via SSH and… |
CVE-2017-12929 | High | 8.8 | 2017-09-21 | Arbitrary File Upload in resource.php of TecnoVISION DLX Spot Player4 version >1.5.10 allows remote authenticated users to upload arbitrary files leading to Re… |