Planex

Cs-qr20 Firmware

4 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.1

CVE-2024-45836

  • EPSS 0.09%
  • Veröffentlicht 26.09.2024 05:15:12
  • Zuletzt bearbeitet 25.03.2025 17:16:09

Cross-site scripting vulnerability exists in the web management page of PLANEX COMMUNICATIONS network cameras. If a logged-in user accesses a specific file, an arbitrary script may be executed on the web browser of the user.

6.8

CVE-2022-38399

  • EPSS 0.22%
  • Veröffentlicht 08.09.2022 08:15:08
  • Zuletzt bearbeitet 21.11.2024 07:16:23

Missing protection mechanism for alternate hardware interface in SmaCam CS-QR10 all versions and SmaCam Night Vision CS-QR20 all versions allows an attacker to execute an arbitrary OS command by having the product connect to the product's specific se...

10

CVE-2017-12577

  • EPSS 0.39%
  • Veröffentlicht 24.08.2018 19:29:01
  • Zuletzt bearbeitet 21.11.2024 03:09:47

An issue was discovered on the PLANEX CS-QR20 1.30. A hardcoded account / password ("admin:password") is used in the Android application that allows attackers to use a hidden API URL "/goform/SystemCommand" to execute any command with root permission...

9

CVE-2017-12576

  • EPSS 0.54%
  • Veröffentlicht 24.08.2018 19:29:00
  • Zuletzt bearbeitet 21.11.2024 03:09:47

An issue was discovered on the PLANEX CS-QR20 1.30. A hidden and undocumented management page allows an attacker to execute arbitrary code on the device when the user is authenticated. The management page was used for debugging purposes, once you log...