9.8

CVE-2023-37220

Synel Terminals - CWE-494: Download of Code Without Integrity Check

Synel Terminals - CWE-494: Download of Code Without Integrity Check
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Synel ≫ Synergy/a Firmware Version < 3015.1
   Synel ≫ Synergy/a Version -
Synel ≫ Synergy Touch Firmware Version < 3015.1
   Synel ≫ Synergy Touch Version -
Synel ≫ Synergy 10 Firmware Version < 3015.1
   Synel ≫ Synergy 10 Version -
Synel ≫ Synergy 5 Firmware Version < 3015.1
   Synel ≫ Synergy 5 Version -
Synel ≫ Sy-910 Firmware Version < 3015.1
   Synel ≫ Sy-910 Version -
Synel ≫ Synergy/x Firmware Version < 3015.1
   Synel ≫ Synergy/x Version -
Synel ≫ Sy110 Face Firmware Version < 3015.1
   Synel ≫ Sy110 Face Version -
Synel ≫ Bioentry-w2 Firmware Version < 3015.1
   Synel ≫ Bioentry-w2 Version -
Synel ≫ Biolite-n2 Firmware Version < 3015.1
   Synel ≫ Biolite-n2 Version -
Synel ≫ Bioentry P2 Firmware Version < 3015.1
   Synel ≫ Bioentry P2 Version -
Synel ≫ Sy-711 Firmware Version < 3015.1
   Synel ≫ Sy-711 Version -
Synel ≫ Sy-715 Firmware Version < 3015.1
   Synel ≫ Sy-715 Version -
Synel ≫ Sy-751 Firmware Version < 3015.1
   Synel ≫ Sy-751 Version -
Synel ≫ Sy-755 Firmware Version < 3015.1
   Synel ≫ Sy-755 Version -
Synel ≫ Sy-777 Firmware Version < 3015.1
   Synel ≫ Sy-777 Version -
Synel ≫ Sy-785 Firmware Version < 3015.1
   Synel ≫ Sy-785 Version -
Synel ≫ Sy-765 Firmware Version < 3015.1
   Synel ≫ Sy-765 Version -
Synel ≫ Sy-7500 Firmware Version < 3015.1
   Synel ≫ Sy-7500 Version -
Synel ≫ Sy-745 Firmware Version < 3015.1
   Synel ≫ Sy-745 Version -
Synel ≫ Sy-780 Firmware Version < 3015.1
   Synel ≫ Sy-780 Version -
Synel ≫ Synergy Firmware Version < 3015.1
   Synel ≫ Synergy Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.27% 0.181
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
cna@cyber.gov.il 7.2 1.2 5.9
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CWE-494 Download of Code Without Integrity Check

The product downloads source code or an executable from a remote location and executes the code without sufficiently verifying the origin and integrity of the code.

https://www.gov.il/en/Departments/faq/cve_advisories
Third Party Advisory