Cellinx - vulnerabilities (CVEs)

5 CVEs in 3 products, 0 in the last 30 days, newest from 2024-02-08.

Products

CVE-2024-24215 - CVSS 5.3 (medium), 2024-02-08: An issue in the component /cgi-bin/GetJsonValue.cgi of Cellinx NVT Web Server 5.0.0.014 allows attackers to leak configuration information via a crafted POST…
CVE-2023-23063 - CVSS 7.5 (high), 2023-02-22: Cellinx NVT v1.0.6.002b was discovered to contain a local file disclosure vulnerability via the component /cgi-bin/GetFileContent.cgi.
CVE-2022-30621 - CVSS 7.6 (high), 2022-07-18: Allows a remote user to read files on the camera's OS "GetFileContent.cgi". Reading arbitrary files on the camera's OS as root user.
CVE-2022-30620 - CVSS 8.8 (high), 2022-07-18: On Cellinx Camera with guest enabled, attacker with web access can elevate privileges to administrative: "1" to "0" privileges by changing the following…
CVE-2020-28250 - CVSS 9.8 (critical), 2020-11-06: Cellinx NVT Web Server 5.0.0.014b.test 2019-09-05 allows a remote user to run commands as root via SetFileContent.cgi because authentication is on the client…