HIGH🇵🇱 Wersja polska

CVE-2023-3805

CVSS 7.3v3.1pub. 2023-07-21upd. 2024-11-21

A vulnerability, which was classified as critical, has been found in Xiamen Four Letter Video Surveillance Management System up to 20230712. This issue affects some unknown processing in the library UserInfoAction.class of the component Login. The manipulation leads to improper authorization. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-235073 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
  • Four Faith Video Surveillance Management System

    APP
    Four-Faith
    ≤ 2023-07-12
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2023-6308MEDIUM6.3ten sam produkt

A vulnerability, which was classified as critical, has been found in Xiamen Four-Faith Video Surveillance Mana...

CVE-2024-9644CRITICAL9.8PL ✓ten sam vendor

Auth Bypass w routerze Four-Faith F3x36 – pominięcie uwierzytelnienia

CVE-2024-9643CRITICAL9.8PL ✓ten sam vendor

Auth Bypass przez zakodowane dane logowania w routerze Four-Faith F3x36

CVE-2024-12856HIGH7.2ten sam vendor

The Four-Faith router models F3x24 and F3x36 are affected by an operating system (OS) command injection vulner...

CVE-2019-12168HIGH7.2ten sam vendor

Four-Faith Wireless Mobile Router F3x24 v1.0 devices allow remote code execution via the Command Shell (aka Ad...