Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

contec solarview compact firmware vulnerabilities and exploits

(subscribe to this query)
9.8
CVSSv3

CVE-2023-46509

An issue in Contec SolarView Compact v.6.0 and before allows an malicious user to execute arbitrary code via the texteditor.php component.
Contec Solarview Compact Firmware
9.8
CVSSv3

CVE-2023-23333

There is a command injection vulnerability in SolarView Compact up to and including 6.00, attackers can execute commands by bypassing internal restrictions through downloader.php.
Contec Solarview Compact Firmware
9.8
CVSSv3

CVE-2022-44354

SolarView Compact 4.0 and 5.0 is vulnerable to Unrestricted File Upload via a crafted php file.
Contec Solarview Compact Firmware 4.0Contec Solarview Compact Firmware 5.0
9.8
CVSSv3

CVE-2022-40881

SolarView Compact 6.00 exists to contain a command injection vulnerability via network_test.php
Contec Solarview Compact Firmware 6.00
9.8
CVSSv3

CVE-2022-31374

An arbitrary file upload vulnerability /images/background/1.php in of SolarView Compact 6.0 allows malicious users to execute arbitrary code via a crafted php file.
Contec Sv-cpt-mc310 Firmware 6.0
9.8
CVSSv3

CVE-2022-29303

SolarView Compact ver.6.00 exists to contain a command injection vulnerability via conf_mail.php.
Contec Sv-cpt-mc310 Firmware 6.00
9.8
CVSSv3

CVE-2021-20658

SolarView Compact SV-CPT-MC310 prior to Ver.6.5 allows an malicious user to execute arbitrary OS commands with the web server privilege via unspecified vectors.
Contec Sv-cpt-mc310 Firmware
9.1
CVSSv3

CVE-2023-29919

SolarView Compact <= 6.0 is vulnerable to Insecure Permissions. Any file on the server can be read or modified because texteditor.php is not restricted.
Contec Solarview Compact Firmware
8.8
CVSSv3

CVE-2023-27521

OS command injection vulnerability in the mail setting page of SolarView Compact SV-CPT-MC310 versions prior to Ver.8.10 and SV-CPT-MC310F versions prior to Ver.8.10 allows remote authenticated malicious users to execute an arbitrary OS command.
Contec Sv-cpt-mc310f FirmwareContec Sv-cpt-mc310 Firmware
8.8
CVSSv3

CVE-2023-27514

OS command injection vulnerability in the download page of SolarView Compact SV-CPT-MC310 versions prior to Ver.8.10 and SV-CPT-MC310F versions prior to Ver.8.10 allows a remote authenticated malicious user to execute an arbitrary OS command.
Contec Sv-cpt-mc310f FirmwareContec Sv-cpt-mc310 Firmware
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-5834CVE-2024-30100CVE-2024-4577physicaldosCVE-2024-30099CVE-2024-27801CVE-2024-32146logic flaw
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook