SF
Product
Sv-cpt-mc310 Firmware
On CISA KEVExploited in the wild
19
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 9Medium 6Low 0
Watch
Add Sv-cpt-mc310 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-29303 In wildKEV | 9.8 | May 12 | SolarView Compact Command Injection Vulnerability Affected: 6.00 |
| CVE-2022-31374 | 9.8 | Jun 21 | An arbitrary file upload vulnerability /images/background/1.php in of SolarView Compact 6.0 allows attackers to execute arbitrary code via a crafted php file Affected: 6.0 |
| CVE-2021-20658 | 9.8 | Feb 24 | SolarView Compact SV-CPT-MC310 prior to Ver.6.5 allows an attacker to execute arbitrary OS commands with the web server privilege via unspecified vectors Affected: before 6.5 |
| CVE-2023-27521 | 8.8 | May 23 | OS command injection vulnerability in the mail setting page of SolarView Compact SV-CPT-MC310 versions prior to Ver.8.10 and SV-CPT-MC310F versions prior to Ver.8.10 allows remote… Affected: before 8.10 |
| CVE-2023-27518 | 8.8 | May 23 | Buffer overflow vulnerability in the multiple setting pages of SolarView Compact SV-CPT-MC310 versions prior to Ver.8.10 and SV-CPT-MC310F versions prior to Ver.8.10 allows a… Affected: before 8.10 |
| CVE-2023-27514 | 8.8 | May 23 | OS command injection vulnerability in the download page of SolarView Compact SV-CPT-MC310 versions prior to Ver.8.10 and SV-CPT-MC310F versions prior to Ver.8.10 allows a remote… Affected: before 8.10 |
| CVE-2022-35239 | 8.8 | Aug 16 | The image file management page of SolarView Compact SV-CPT-MC310 Ver.7.23 and earlier, and SV-CPT-MC310F Ver.7.23 and earlier contains an insufficient verification vulnerability… Affected: before 7.24 |
| CVE-2021-20659 | 8.8 | Feb 24 | SolarView Compact SV-CPT-MC310 prior to Ver.6.5 allows an authenticated attacker to upload arbitrary files via unspecified vectors Affected: before 6.5 |
| CVE-2021-20661 | 8.1 | Feb 24 | Directory traversal vulnerability in SolarView Compact SV-CPT-MC310 prior to Ver.6.5 allows authenticated attackers to delete arbitrary files and/or directories on the server via… Affected: before 6.5 |
| CVE-2022-29298 | 7.5 | May 12 | SolarView Compact ver.6.00 allows attackers to access sensitive files via directory traversal Affected: 6.00 |
| CVE-2021-20662 | 7.5 | Feb 24 | Missing authentication for critical function in SolarView Compact SV-CPT-MC310 prior to Ver.6.5 allows an attacker to alter the setting information without the access privileges… Affected: before 6.5 |
| CVE-2023-27512 | 7.2 | May 23 | Use of hard-coded credentials exists in SolarView Compact SV-CPT-MC310 versions prior to Ver.8.10, and SV-CPT-MC310F versions prior to Ver.8.10, which may allow a remote… Affected: before 8.10 |
| CVE-2022-31373 | 6.1 | Jun 21 | SolarView Compact v6.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component Solar_AiConf.php Affected: 6.0 |
| CVE-2021-20660 | 6.1 | Feb 24 | Cross-site scripting vulnerability in SolarView Compact SV-CPT-MC310 prior to Ver.6.5 allows an attacker to inject an arbitrary script via unspecified vectors Affected: before 6.5 |
| CVE-2022-29302 | 5.5 | May 12 | SolarView Compact ver.6.00 was discovered to contain a local file disclosure via /html/Solar_Ftp.php Affected: 6.00 |
| CVE-2021-20657 | 5.4 | Feb 24 | Improper access control vulnerability in SolarView Compact SV-CPT-MC310 prior to Ver.6.5 allows an authenticated attacker to obtain and/or alter the setting information without… Affected: before 6.5 |
| CVE-2023-27920 | 4.3 | May 23 | Improper access control vulnerability in the system date/time setting page of SolarView Compact SV-CPT-MC310 versions prior to Ver.8.10 and SV-CPT-MC310F versions prior to… Affected: before 8.10 |
| CVE-2021-20656 | 4.3 | Feb 24 | Exposure of information through directory listing in SolarView Compact SV-CPT-MC310 prior to Ver.6.5 allows an authenticated attacker to obtain the information inside the system,… Affected: before 6.5 |
| CVE-2014-2324 | – | Mar 14 | Multiple directory traversal vulnerabilities in (1) mod_evhost and (2) mod_simple_vhost in lighttpd before 1.4.35 allow remote attackers to read arbitrary files via a Affected: before 6.5 |
Showing 19